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ALSO  IH  OUR  NEWS  SECTION 


■  Microsoft  expands  patch  management  with  Windows  Update  Services,  but  not  soon  enough  fot  users.'PAd^^^' 

■  BrainShare  preview:  Novell  appears  to  have  new  lease  on  life  as  it  treads  NetWare-to-Linux  path.  pAbeiO  )  *'  '-i 
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U  nwary  users  can  i 

be  locked  into  bad  i 

outsourcing  deals 
with  fuzzy  scope, 
high  prices  and  no 
exit  strategy.  We’ve 
identified  12  HIDDEN 
TRAPS  in  outsourcing 
contracts  and,  more 
importantly,  howto 
avoid  them,  page  39 


Big  Four  Accounting  Firms 
Join  in  Cyber-Risk  Effort 


Create  index  to  gauge 
firms’  preparedness 


BY  JAIKUMAR  VIJAYAN 

A  consortium  of  companies 
that  includes  the  Big  Four  ac¬ 
counting  firms  and  at  least 
one  large  insurer  is  quietly 
working  on  a  cybersecurity 
risk  measurement  framework 
for  large  enterprises,  Comput- 
erworld  has  learned. 

The  Risk  Preparedness  In¬ 
dex  is  being  developed  by  the 
newly  formed  Global  Security 


Consortium,  which  so  far 
includes  Pricewaterhouse- 
Coopers,  Ernst  &  Young  LLP, 
Deloitte  &  Touche  LLP, 
KPMG  International  and  in¬ 
surance  giant  AIG  Interna¬ 
tional  Inc. 

The  RPI  was  originally  be¬ 
ing  developed  to  provide  a 
risk  measurement  model  for 
use  within  the  insurance  and 
accounting  industries.  But  the 
goal  now  is  for  the  index  to 
provide  the  basis  for  a  much 
more  broadly  applicable  sys¬ 
tem  for  measuring  and  rating 


organizational  risk  prepared¬ 
ness,  according  to  a  source 
close  to  the  GSC. 

The  GSC  has  been  in  active 
discussions  with  several  in¬ 
dustry  groups,  including  The 
Open  Group  standards  body, 
for  several  months  in  a  bid  to 
gain  endorsements  and  wider 
support  for  the  effort  to  build 
the  framework. 

A  GSC  spokesman  declined 
to  comment  on  the  current 
status  of  that  effort.  But  the 
source  close  to  the  body  con- 
Risk  Index,  page  51 


Risk  Preparedness  Index 

■  WHAT:  A  standard  framework  for 
quantitatively  measuring  and  rating  a 
company's  cyber-risk  preparedness. 

■  WHO:  The  Global  Security  Con¬ 
sortium,  which  includes  the  Big  Eour 
accounting  firms  and  at  least  one  in¬ 
surance  company,  are  developing  it. 

■  WHY:  Few  standard  tools  exist  for 
rating  cyber-risk  preparedness  today. 

■  WHEN:  To  be  released  sometime 
this  summer. 
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AmtrakLagsin 
Implementing 
Security  Technologies 

Madrid  attacks  refocus  attention  on  passenger 
rail  system’s  vulnerability,  laek  of  DHS  ftinding 


BY  DAN  VERTON 

WASHINGTON 

In  the  aftermath  of  the  March 
II  terrorist  attacks  that  killed 
201  train  passengers  in  Madrid, 
some  U.S.  lawmakers  and  IT 
professionals  are  raising  ques¬ 
tions  about  the  lack  of  securi¬ 
ty  systems  in  place 
throughout  the  U.S. 
commuter  rail  system, 
particularly  the  federal¬ 
ly  subsidized  Amtrak 
network. 

In  a  letter  sent  to 
Secretary  of  Homeland  Secu¬ 
rity  Tom  Ridge  on  March  12, 
Sen.  Olympia  J.  Snowe  (R- 
Maine)  and  Rep.  Mike  Castle 
(R-Del.)  demanded  an  expla¬ 
nation  for  the  imbalance  be¬ 
tween  the  billions  of  dollars  in 
Department  of  Homeland  Se¬ 


curity  funding  earmarked  for 
new  security  technologies  at 
air  and  sea  ports  and  the  mea¬ 
ger  $115  million  made  available 
to  protect  railroads. 

“We  have  continued  to 
shortchange  security  for  our 
nation’s  rail  system,”  Snowe 
and  Castle  wrote  in 
their  letter.  “More 
must  be  done  to  intro¬ 
duce  improved  securi¬ 
ty  procedures  and 
technologies  to  our 
rail  system  so  we  can 
be  better  protected.” 

A  DHS  spokesman  said  rail 
system  security  is  primarily 
the  responsibility  of  Amtrak 
and  state  and  local  authorities. 
The  spokesman  also  acknowl¬ 
edged  that  Amtrak  passengers 
Amtrak,  page  51 


Concerns  about 
Amtrak  security 
date  to  9/11 
aftermath: 
QuickLink  33949 


Users  Lobby  for  MPE  Support 


Prod  HP  to  release  its 
e3000  OS  source  code 


BY  PATRICK  THIBODEAU 

Users  of  Hewlett-Packard 
Co.’s  doomed  e3000  system 
are  pushing  the  company  to 
act  quickly  to  release  its  pro¬ 
prietary  operating  system 
source  code  to  keep  it  from 
being  frozen  in  time  once  the 
company  cuts  support  at  the 
end  of  2006. 

Users  and  independent 
e3000  consultants  are  asking 
HP  to  agree  to  a  plan  to  li¬ 
cense  the  MPE  operating  sys¬ 
tem  source  code  this  year  to  a 


third  party  such  as  OpenMPE 
Inc.,  a  user  advocacy  group  in 
Hagerstown,  Md. 

“There  is  clearly  a  business 
case  for  continuing  MPE’s  life 
beyond  2006,”  said  Donna 
Garverick,  who  administers 
e3000  systems  at  Longs  Drug 
Stores  Corp.,  a  470-store  chain 
based  in  Walnut  Creek,  Calif., 
and  who  is  involved  with 
OpenMPE.  “You  are  going  to 
have  customers,  some  of  no¬ 
table  size,  who  will  still  be 
running  MPE,  and  having  an 
organization  to  support  MPE 
is  important.” 

Even  though  the  deadline  to 
HP  eSOOO,  page  16 
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Make  a  name  for  yourself 
with  Windows  Server  System. 


“We  need  equipment  that  works  and  a  company  that’s 
going  to  be  around  for  technical  support.  There  are  two 
reasons  we  use  Gateway®  servers:  cost  and  reliability. 
Gateway  servers  are  efficient.” 

Bruce  Hagood,  IT  Director 
Money  Concepts  International 

In  the  online  securities  market,  fortunes  can  be  won  and  lost  in  seconds. 

So  when  Money  Concepts  required  a  cost-effective,  secure  server  network 
solution  to  meet  the  growing  needs  of  their  650  financial  planning  centers, 
they  invested  in  Gateway. 

We  provided  highly  reliable  server  technology  with  the  reliability,  advanced 
features,  built-in  redundancies,  and  high-speed  performance  necessary  to 
meet  strict  SEC  requirements.  And  with  a  dedicated  systems  consultant 
account  manager  advising  from  planning  through  implementation,  this  was 
one  investment  that  proved  to  be  no  risk  and  all  reward  for  Money 
Concepts  International. 

To  learn  more  about  Gateway’s  complete  IT  solutions  including 
servers,  storage,  and  networking,  call  us  today.  Ask  about  saving 
$1,000  on  our  840-2TB  SATA  RAID  Enclosure  when  purchased 
with  a  rackmount  server  before  April  30,2004.' 


We’re  listening. 


Gateway  knows  that 
and  financial  services 
want  the  same  thing. 
A  solid  investment. 


IT 


Professional 
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Gateway®  995  Rack  Server 
Prices  Starting  at  $5,499 

4U  Quad  Processor,  Enterprise  Class 

•  Quad  Intel®  Xeon^'^  Processor 
MP  Capable 

•  Up  to  24GB  PC2I00  ECC  DDR  SDRAM 

•  Up  to  Five  U320  SCSI  Hot-Swap 
Hard  Drives 

•  Multipath  Booting,  Memory  Scrubbing, 
Light  Guiding  Diagnostics 


Gateway®  840-2TB  SATA 
RAID  Enclosure 
Prices  Starting  at  $5,949 

2U  High-Capacity  Storage  Solution 

•  Comprehensive  2TB  Solution 
Scales  to  3TB^ 

•  Hot-Swap  SATA  Hard  Drives  with 
Embedded  RAID 

•  3-Year  Limited  Warranty** 


Award-Winning  Customer  Support^ 

Gateway  provides: 

•  24/7  phone  support 

•  On-site  support,  next  business  day  and  within  4  hours 
or  the  next  day — nationwide** 

•  On-site  support  within  2  hours — in  68  major  metro  areas** 


Blueprint  for  Code  Automation 

In  this  week’s  Technology  section:  Some  companies  are 
adopting  the  Model  Driven  Architecture  approach  to  build¬ 
ing  applications  to  achieve  benefits  such  as  automatic 
code  generation,  reductions  in  development  time  and 
costs,  and  improvements  in  code  quality.  Page  25 


Play  War! 

In  the  Management  section:  War  games 
can  make  strategic  planning  come  to  life  and 
help  companies  simulate  business  moves  such 
as  making  strategic  IT  investments  —  as  well 
as  competitors’  countermoves.  Page  42 
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4  PeopleSoft  announces  an 

upgrade  of  its  World  green- 
screen  applications. 

4  EDS  sells  off  its  product  life- 
cycle  management  unit. 

5  Microsoft  users  make  a 

short-term  demand:  better 
patch  management. 

5  Longhorn  will  arrive  no  earli¬ 
er  than  2006,  a  Microsoft  ex¬ 
ecutive  says. 

8  Computerworld’s  Maryfran 
Johnson  wins  a  national  award 
for  editorial  integrity. 

10  Novell’s  embrace  of  Linux 
revitalizes  the  company  in  the 
eyes  of  some  users. 

10  TOEs,  or  TCP/IP  offload  en¬ 
gines,  start  to  make  inroads 
into  iSCSI-based  SANs. 

14  The  SEC  seeks  feedback  on 
possible  new  rules  to  auto¬ 
mate  stock-trade  processing. 

14  Cisco  bulks  up  its  Catalyst 
switch  line,  including  support 
for  10  Gigabit  Ethernet. 

15  CRM  users  tout  the  benefits 
of  the  technology  —  if  it’s 
used  in  the  right  way. 

15  The  lack  of  alignment  be¬ 
tween  IT  and  business  units  is 
a  two-way  street,  according  to 
a  survey  of  tech  execs. 

16  IT  professionals  need  a  mix 

of  industry-specific  skills 
and  a  multidisciplinary  back¬ 
ground  to  keep  their  jobs  as 
more  work  is  moved  offshore. 


30  Emerging  Technologies: 

SANs  Come  Up  to  Speed. 

Two  new  high-speed  Fibre 
Channel  standards  could 
provide  a  migration  path  as 
SANs  ascend  to  lOGbit/sec. 
speeds. 

32  Q&A:  innovation  for  Hire. 

Sarnoff  Corp.  CEO  Satyam 
Cherukuri  discusses  his 
company’s  innovation  meth¬ 
odology  and  why  it  has 
little  to  do  with  “hot”  tech¬ 
nologies. 

34  Future  Watch:  Chameleon 
Computing.  Reconfigurable 
computing  architectures  in¬ 
volve  processor  hardware 
that  automatically  adapts  to 
changing  application  needs. 

36  Security  Manager’s  Journal: 
Security  Tools  Search  Falls 
Short.  Identity  management 
and  encryption  tools  demon¬ 
strated  at  a  security  trade 
show  fail  to  impress  Mathias 
Thurman. 

MANAGEMENT 

39  Outsourcing  Gotchas.  Sawy 
lav^ryers  have  identified  12  of 
the  biggest  traps  in  outsourc¬ 
ing  contracts  —  from  having 
a  fuzzy  scope  to  lacking  an 
exit  strategy  —  and  how  to 
avoid  them. 

44  Career  Watch.  Vince  Campi- 
telli  describes  the  work  of  IT 
auditors  at  Wachovia  Corp. 
and  offers  career  advice  for  IT 
professionals  considering  a 
move  into  IT  auditing. 


8  On  the  Mark:  Mark  Hall  re¬ 
veals  why  Web  server  load¬ 
balancing  products  are  on 
the  outs. 

22  Maryfran  Johnson  warns  IT 
managers  that  they  may  have 
to  fork  over  a  lot  of  money  to 
make  privacy  advocates  happy. 

22  Pimm  Fox  has  an  answer  for 
companies  that  wonder  how 
to  go  about  managing  their 
expanding  and  diversifying 
storage  infrastructures. 

23  Thornton  A.  May  discusses 
three  techniques  for  planning 
for  the  future  that  are  inex¬ 
pensive  to  deploy. 

38  Tommy  Peterson  laments  that 
as  technology  has  lost  some  of 
its  cachet  over  the  past  few 
years,  IT  departments’  status 
has  declined. 

45  Norbert  J.  Kubilus  backs  leas¬ 
ing:  You  get  predictable  pay¬ 
ments  and  asset  management, 
and  the  leasing  company  as¬ 
sumes  the  risks  of  managing 
IT  obsolescence  and  disposal. 

52  Frankly  Speaking:  Frank 
Hayes  says  getting  your  de¬ 
partment  educated  and  ready 
for  RFID  can  now  be  done  on 
the  cheap. 
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Foiling  a  Hacker’s  Delight 

MOBILE/WIRELESS:  How  to  implement  an  in- 
depth  defense  to  protect  the  corporate  net¬ 
work  against  threats  associated  with  remote 
and  mobile  workers.  O  QuickLink  45354 

Cache  or  Carry? 

STORAGE:  Companies  that  need  to  consoli¬ 
date  their  data  over  WANs  can  choose  be¬ 
tween  file-caching  technologies  and  WAN 
optimization,  writes  Val  Golan  of  Golan  Con¬ 
sulting.  O  QuickLink  45361 

Avoid  the  Career  Doom  Loop 

CAREERS:  If  you  don’t  constantly  demon¬ 
strate  your  value  to  your  company,  people 
will  forget  what  you’re  doing  and  why  you’re 
there.  To  avoid  the  doom  loop  at  work,  take 
personal  responsibility  to  ensure  that  you’re 
always  adding  value.  O  QuickLink  45178 

Trusted’  Digital  Insider  Theft 

SECURITY:  When  credit  card  numbers,  cus¬ 
tomer  records  or  source  code  are  lifted  from 
your  company  in  broad  daylight,  that’s  extru¬ 
sion.  IT  veteran  Danny  Lieberman  suggests 
where  to  look  for  potential  sources  of  extru¬ 
sion  at  your  company.  O  QuickLink  45044 

Web-based  Mail  and  Security 

SECURITY:  Many  companies  are  skittish 
about  Web  mail  because  of  security  con¬ 
cerns.  Consultant  Keith  Pasley  takes  a  look  at 
options  for  deploying  secure  Web  mail  at 
your  company.  O  QuickLink  45181 


What’s  a  QuickLink? 


O  Throughout  each  issue  of 
Computemorld.you'W 
see  five-digit  QuickLink  codes 
pointing  to  related  content  on 
our  Web  site.  Also,  at  the  end  of 
each  story,  a  QuickLink  to  that 
story  online  facilitates  sharing  it 
with  colleagues.  Just  enter  any 
of  those  codes  into  the  Quick¬ 
Link  box,  which  is  at  the  top  of 
every  page  on  our  site. 
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O  QuickLink  a1510 
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O  QuickLink  a1430 

Knowledge  Centers 

O  QuickLink  a2570 
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Microsoft,  European 
Officials  End  Talks 


Antitrust  settlement  talks  be¬ 
tween  Microsoft  Corp.  and  the 
European  Commission  broke 
down  last  Thursday,  and  Euro¬ 
pean  competition  officials  this 
week  plan  to  ask  the  commission 
to  rule  that  Microsoft  has  abused 
its  desktop  operating  system  mo¬ 
nopoly.  The  regulators  will  also 
propose  a  series  of  restrictions  on 
Microsoft’s  future  business  con¬ 
duct.  The  software  vendor  said  it 
will  appeal  the  expected  decision. 


SCom  Reports  Loss 

3Com  Corp.  in  Santa  Clara,  Calif., 
reported  that  it  remained  in  the 
red  during  its  third  quarter  and 
that  revenue  fell  21%  year  over 
year.  The  company  said  it  expects 
fourth-quarter  revenue  to  be  simi¬ 
lar  to  the  total  from  the  third 
quarter,  which  ended  Feb.  27. 


SEC  Rnes  Lucent 

Lucent  Technologies  Inc.  said  it 
will  pay  a  $25  million  fine  to  the 
U.S.  Securities  and  Exchange 
Commission  as  part  of  a  deal 
signed  early  last  year  to  settle  an 
accounting  investigation.  Lucent 
initially  wasn’t  fined,  but  the  com¬ 
pany  said  the  SEC’s  staff  has  de¬ 
cided  that  it  should  be  penalized 
for  a  lack  of  cooperation  during 
the  investigation.  Murray  Hill, 
N.J.-based  Lucent  added  that  it 
doesn’t  plan  to  contest  the  fine. 


Short  Takes 

Dallas-based  i2  TECHNOLOGIES 
INC.  said  it  plans  to  lay  off  an  un¬ 
determined  number  of  workers  as 
part  of  a  restructuring  aimed  at 
reducing  operating  expenses  by 
about  10%. . . .  IBM  said  it  was 
tapped  by  the  U.S.  DEPARTMENT 
OF  DEFENSE  to  help  develop  poli¬ 
cies  for  the  use  of  RFID  devices 
by  military  suppliers. 
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PeopleSoft  Updates  World 
Green-Screen  Applications 

Adds  Web  interface  to  J.D.  Edwards  line 


BY  MARC  L.  SONGINI 

N  A  MOVE  AIMED  at  keep¬ 
ing  a  large  part  of  its  ex¬ 
panded  installed  base 
happy,  Peo¬ 
pleSoft  Inc.  is 
rolling  out  a  re¬ 
fresh  of  the  World 
green-screen  appli¬ 
cations  that  the 
software  vendor 
inherited  when  it  bought  J.D. 
Edwards  &  Co.  last  summer. 

PeopleSoft  last  week  an¬ 
nounced  a  Web-based  user  in¬ 
terface  and  various  other  new 
features  for  the  World  line, 
which  is  still  used  by  nearly 
half  of  J.D.  Edwards’  6,700  cus¬ 
tomers.  The  upgrade  follows 
the  launch  last  fall  of  a  pro- 
World  lobbying  campaign  by  a 
group  of  users  who  said  they 
didn’t  want  the  software  to  be 
treated  as  a  cash  cow  while 
PeopleSoft  tried  to  migrate 
them  to  its  other  applications 
[QuickLink  42316]. 

Positive  Response 

“We’re  pleased  PeopleSoft  has 
brought  some  new  vigor  into 
the  World  line,”  said  James 
Berlekamp,  applications  man¬ 
ager  at  tableware  maker  Libbey 
Inc.  in  Toledo,  Ohio.  Libbey 
runs  a  suite  of  World  software, 
including  the  human  resources 
and  payroll  modules.  Berle¬ 
kamp  noted  that  J.D.  Edwards 
had  allowed  the  World  line  to 
wane,  forcing  Libbey  to  write 
some  of  its  own  bug  fixes  and 
functionality  enhancements. 

The  Web-based  user  in  ter- 
face  could  help  the  company 
cut  down  on  software  admin¬ 
istration  costs,  he  said,  add¬ 
ing  that  he  hopes  PeopleSoft 
will  consider  additional  im¬ 
provements  to  make  World’s 
warehouse  and  inventory 
management  software  run 
more  efficiently. 

The  new  user  interface  was 
the  most  requested  feature, 
said  Dave  Siebert,  general 
manager  of  the  World  product 


line.  It  will  be  available  at  the 
end  of  this  month.  PeopleSoft 
is  also  adding  about  250  other 
enhancements,  mostly  focused 
on  ease  of  use  and 
regulatory  compli¬ 
ance.  Eor  example, 
tighter  integration 
will  let  users  feed 
sales  order  infor¬ 
mation  directly 
into  World’s  manufacturing 
and  distribution  management 
software,  Siebert  said. 

“This  is  a  boost  [for  World],” 
he  said.  “We’ve  been  able  to,  as 
part  of  PeopleSoft,  get  more  re¬ 
sources  and  been  able  to  add 
more  people  to  development.” 


BY  JAIKUMAR  VIJAYAN 

Users  of  UGS  PLM  Solutions 
software  can  expect  to  see  the 
company  partner  with  more 
global  systems  integrators  and 
service  providers,  a  UGS 
official  said  last  week  in  the 
wake  of  its  sale  by  parent  Elec¬ 
tronic  Data  Systems  Corp. 

The  sale  is  also  unlikely  to 
cause  any  disruptions  for  cus¬ 
tomers  of  UGS’s  product  life- 
cycle  management  software, 
the  executive  added. 

EDS  last  week  announced 
the  sale  of  its  UGS  PLM  sub¬ 
sidiary  to  three  private  equity 
firms  in  a  transaction  valued  at 
$2.05  billion.  Under  the  deal, 
Bain  Capital  LLC  in  Boston, 
Silver  Lake  Partners  LLC  in 
Menlo  Park,  Calif.,  and  War¬ 
burg  Pincus  LLC  in  New  York 
will  each  hold  an  equal  invest¬ 
ment  in  UGS. 

Being  cut  loose  from  EDS 
will  allow  UGS  PLM  to  attract 
more  services  partners  that 
might  otherwise  have  stayed 
away,  said  Robert  M.  Nierman, 
executive  vice  president  of 
business  strategy  at  UGS. 


“Any  movement  in  this 
space  is  appreciated,”  said 
Gary  Riley,  a  systems  analyst 
at  Matanuska  Telephone  Asso¬ 
ciation  Inc.  in  Palmer,  Alaska, 
and  a  member  of  the  Quest 
user  group  for  J.D.  Edwards 
customers.  Riley  said  he’s  in¬ 
terested  in  the  Web  user  inter¬ 
face  and  the  tighter  integration 
between  the  distribution  and 
sales  order  applications. 

World  runs  only  on  IBM’s 
iSeries  servers  (formerly  the 
AS/400  line),  while  the  newer, 
midmarket-oriented  Enter- 
priseOne  software  that  People- 
Soft  got  from  J.D.  Edwards  sup¬ 
ports  multiple  hardware  plat¬ 
forms.  PeopleSoft  also  an¬ 
nounced  an  upgraded  version 


“Being  part  of  EDS  made  it 
difficult  for  us  to  entertain  se¬ 
rious  discussion  about  global 
partnerships,”  he  said.  “This 
opens  the  door  for  stronger 
partnerships,  though  EDS  will 
remain  a  key  partner  for  us.” 

Being  independent  will  give 
UGS  the  “ability  to  act  more 
like  a  software  company”  in¬ 
stead  of  the  more  services-led 
business  it  had  become  as  an 
EDS  subsidiary,  said  Ed  Miller, 
an  analyst  at  CIMdata  Inc.  in 
Aim  Arbor,  Mich. 

“In  the  near  term,  they  need 
to  reinforce  to  their  customers 
that  their  direction  is  consis- 


PLM  Portfolio 

UGS  PLM  sells 
the  following  products: 

■  Teamcenter:  Core  PLM  suite 

■  Unigraphics  NX:  3-D  prod¬ 
uct  engineering  software 

■  l-deas:  Integrated 
CAD/CAM/CAE  product 

■  E-factory:  Preproduction 
information  management 


NEW  FEATURES 


EnterpriseOne  8.10 

■  A  real  estate  management  ap¬ 
plication  that  streamlines  the 
tracking  of  leases,  budgets  and 
other  property-related  data  . 

■  A  financial  management  tool 
for  creating  multiyear  forecasts 

to  help  reduce  business  risks 

■  Asset  life-cycle  management 
software  to  automate  the 
process  of  ensuring  that 
equipment  is  used  efficiently 

of  the  EnterpriseOne  applica¬ 
tions  last  week  (see  box). 

John  Matelski,  deputy  CIO 
for  the  city  of  Orlando,  isn’t  a 
World  user.  But  after  conduct¬ 
ing  an  informal  survey  of  10 
World  customers,  Matelski, 
who  is  a  member  of  Quest’s 
board,  said  “the  overriding 
sentiment . . .  seems  to  be  that 
they’re  pleased  that  long- 
awaited  progress  is  finally 
being  made.”  O  45589 


tent  with  what  they  have  been 
saying”  prior  to  the  sale. 

Miller  said.  The  UGS  busi¬ 
ness,  with  nearly  $900  million 
in  revenue,  was  a  profitable 
one  for  EDS.  But  it  will  need 
to  work  on  raising  its  market 
visibility  after  having  a  rela¬ 
tively  low  profile  as  an  EDS 
unit.  Miller  added. 

“Everyone  we  have  talked  to 
from  the  EDS  side  has  assured 
us  that  this  is  going  to  be  com¬ 
pletely  transparent,”  said  John 
Loo,  senior  manager  of  techni¬ 
cal  computing  at  a  California- 
based  sporting  goods  compa¬ 
ny  that  is  a  longtime  user  of 
UGS  PLM  products.  Loo  re¬ 
quested  that  his  company  not 
be  named. 

EDS’s  sale  of  its  UGS  PLM 
subsidiary  comes  at  a  time 
when  the  PLM  industry  looks 
poised  to  grow,  said  Andrew 
Balson,  managing  director  at 
Bain  Capital.  After  years  of 
slow  growth,  the  market  for 
product  life-cycle  manage¬ 
ment  software  has  reached  an 
“inflection  point,”  Balson  said. 

“We  think  the  technology 
today  is  mature  enough  and 
the  customers  are  mature 
enough  that  we  are  going  to 
see  very  significant  growth,” 
he  said.  O  45592 
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Users  Want  Microsoft  to  Feel 
Patch  Management  Urgency 


Microsoft  Management  Update 

WINDOWS  UPDATE  SERVICES:  The  renamed  new  edition  of  Software 
Update  Services,  for  patch  and  software  update  management;  the  beta  was 
released  last  week.  It  can  now  be  used  for  SQL  Server,  Exchange  Server, 
Office  2003  and  Office  XP,  in  addition  to  Windows. 

SYSTEM  CENTER  2005:  A  private  beta  was  released  last  week  the  inte¬ 
grated  management  suite  will  include  Systems  Management  Server  2003, 
MOM  2005  and  a  new  common  reporting  engine. 

SYSTEM  DEFINITION  MODEL  (SDM);  The  first  design  preview  of  the  XML- 
based  application  manifest  was  unveil^  to  150  partners  and  targe  customers 
for  feedback:  SDM  is  core  piece  of  Microsoft's  Dynamic  Systems  Initiative. 

MICROSOFT  OPERATIONS  MANAGER  (MOM)  2005:  Formedy  known  as 
MOM  2004;  a  beta  was  released  last  week.  New  features  include  wizard- 
based  installation,  a  task-based  user  interface  and  visual  of  display  of  servers 
and  applications.  A  beta  of  the  lower-cost  MOM  2005  Express  vras  also  released, 

MOM  MANAGEMENT  PACKS:  They  were  released  from  Siebel  Systems, 
Veritas  and  Hitachi,  in  addition  to  Microsoft  connectors  for  IBM  Tivoli  and 
HP  Open  View. 

m 

SYSTEMS  MANAGEMENT  SERVER  2003  FEATURE  PACKS:  Beta  ver¬ 
sions  were  released  last  week  of  packs  for  managing  devices  running  Win- 
dovirs  CE,  Windows  Mobile-based  Pocket  PC  and  Smartphone  software. 


New  Windows 
Update  Services 
gets  eager  looks 

BY  CAROL  SLIWA 

LAS  VEGAS 

Users  of  Microsoft  Corp.’s 
management  products  showed 
keener  interest  in  short-term 
deliverables  than  in  the  long¬ 
term  strategic  initiatives  that 
the  company  outlined  here  last 
week  at  its  annual  manage¬ 
ment  conference. 

They  packed  sessions  on 
Systems  Management  Server 
(SMS)  2003  and  the  newly  re¬ 
named  Windows  Update  Ser¬ 
vices,  formerly  called  Soft¬ 
ware  Update  Services  (SUS). 

Although  the  acronym  for 
the  new  edition  —  WUS  — 
drew  chuckles,  attendees  ex¬ 
pressed  serious  interest  in  the 
free  service  that  can  help 
them  patch  not  only  Windows 
but  also  Office  2003  and  XP, 
SCJL  Server  and  Exchange 
Server.  The  ability  to  update 
other  Microsoft  products  will 
be  added  later  this  year,  said 
Steve  Anderson,  a  director  of 


Is  there  going  to  be  a  Release  2 
of  Windows  Server  2003? 

There’s  a  set  of  innovations  that 
have  been  under  development.  We 
want  to  get  those  into  customers’ 


Windows  server  marketing. 

In  contrast  to  SUS,  the  new 
version  will  also  let  users 
target  individual  computers  or 
groups  of  computers,  get  basic 
reports  about  which  comput¬ 
ers  have  been  patched,  and 
download  only  patch  bits  that 
represent  changes  to  the  sys¬ 
tem,  Anderson  added. 

However,  the  delayed  avail¬ 
ability  of  WUS  was  a  letdown 
for  some  attendees.  CEO  Steve 
Ballmer  pledged  last  October 
that  the  patch  management 
services  would  be  available  in 
the  first  half  of  this  year,  but 
Microsoft  officials  last  week 
said  they  won’t  be  ready  until 
the  second  half.  A  limited  beta 
was  released  last  week  to  about 
200  customers,  according  to  a 
Microsoft  spokeswoman. 

“I  was  a  little  disappointed,” 
said  Scott  Sikes,  manager  of 
open  systems  operations  at 
Compass  Bank  in  Birmingham, 
Ala.  “We  wanted  to  look  at  it 
because  we’re  also  looking  at 
several  third-party  products. 
Patch  management  is  a  pretty 
big  issue,  especially  in  the  fi¬ 
nancial  realm.” 


Is  2006  applicable  to  the  Long¬ 
horn  client  and  server?  I  can't 
speak  as  much  for  the  client  pieces. 


Two  products  that  are  on 
track  to  ship  in  the  second 
half  of  this  year  as  originally 
planned  are  Microsoft  Opera¬ 
tions  Manager  (MOM)  2005 
and  System  Center  2005.  The 
products  were  tagged  2005  be¬ 
cause  Microsoft  plans  to  adopt 
a  new  naming  convention,  la¬ 
beling  offerings  due  in  the  sec¬ 
ond  half  with  the  subsequent 
year’s  date,  according  to  Bob 
Muglia,  senior  vice  president 
of  the  Windows  Server  division. 

Weighing  the  Need 

System  Center  2005  is  an  inte¬ 
grated  management  suite  that 
includes  SMS,  MOM  and  a 
new  common  reporting  sys¬ 
tem.  Microsoft  last  week  also 
imveiled  new  details  about  the 
second  version  of  System  Cen¬ 
ter,  including  a  wizards-based 
capacity-planning  tool  code- 
named  Indy. 

Although  several  users  at 
companies  that  already  oper¬ 
ate  both  SMS  and  MOM  said 
they’re  intrigued  by  the  new 
capabilities,  some  from  larger 
companies  said  they  don’t  think 
they  will  have  reason  to  seek 


Some  analysts  talk  about  Long- 
.  horn  server  arriving  in  2007. 

Is  that  likely?  It's  too  early  to  say 
for  sure. 

:  Is  it  possible  that  Longhorn  fea¬ 
tures  will  turn  up  in  Release  2 
of  Windows  Server  2003?  There 
are  three  major  pillars  for  Longhorn. 
One  is  the  new  user  interface  pieces 
.  in  the  Avalon  Ul,  the  graphical  Ul. 
Another  is  WinFS  [storage].  And  the 
third  is  the  Web  services  infrastruc¬ 
ture  in  Indigo. . . .  At  this  point,  it 
doesn't  look  like  any  of  those  things 
could  possibly  ship  any  earlier. 

•  Windows  Update  Services  was 
due  in  the  first  half  of  this  year. 
Now  it’s  expected  in  the  second 
half.  What  happened?  We  start¬ 
ed  looking  at  the  features  that  our 
customers  needed  to  get  these 


out  the  new,  integrated  product. 

“Unless  we  imdergo  some 
sort  of  change  in  products,  I 
don’t  see  it  coming  into  our  or¬ 
ganization,”  said  Clark  Ardem, 
a  technical  director  at  CNA  In¬ 
surance  in  Chicago.  He  noted 
that  CNA  uses  operations  man¬ 
agement  products  from  NetIQ. 
Corp.  and  Hewlett-Packard  Co. 
rather  than  MOM. 

The  long-term  vision  for 
System  Center  is  far  more  am¬ 
bitious  than  the  initial  version 


patches  rolled  out  effectively,  and 
frankly,  we’ve  added  functionality 
to  Windows  Update  Services  over 
the  last  six  months.  For  example, 
we  added  the  ability  to  install  patch¬ 
es  at  the  time  a  user  shuts  down 
a  system. 

Last  year,  Microsoft  officials 
said  Version  2  of  System  Cen¬ 
ter  would  be  ready  in  2005.  is 
that  still  the  case?  We’ll  be  in 
beta  for  sure  in  2005. 

Is  it  likely  to  be  ready  in  2006 
then?  I  think  it  is  likely  2006. 

-  Carol  Sliwa 


MOREONUNE 

Head  to  our  Web  site  for  the  full 
Muglia  interview: 

QuickLink  45522 
www.computerwortd.com 


due  out  this  year.  Version  2 
will  support  the  XML-based 
System  Definition  Model 
(SDM),  which  is  intended  to 
help  developers,  operations 
managers  and  users  better 
communicate  about  application 
resources  and  requirements. 

A  design  preview  of  SDM, 
which  is  a  core  piece  of  Mi¬ 
crosoft’s  Dynamic  Systems 
Initiative  (DSI),  was  unveiled 
earlier  this  month  to  a  select 
group  of  partners  and  large 
customers.  SDM  is  expected 
to  be  released  in  the  first  half 
of  next  year  along  with  Visual 
Studio  2005,  and  it  will  later 
be  supported  in  the  second 
version  of  System  Center, 
which  is  due  no  sooner  than 
2006,  according  to  Muglia. 

But  the  full  DSI  vision  isn’t 
expected  to  be  realized  for 
several  years,  and  some  users 
said  that  even  though  aspects 
of  it  look  interesting,  it’s  too 
far  off  for  them  to  give  it  seri¬ 
ous  attention. 

Rick  Derks,  director  of  infor¬ 
mation  services  at  Farm  Credit 
Services  of  Missouri  in  Jeffer¬ 
son  City,  said  DSI  represents  “a 
whole  different  way  of  doing 
things,”  not  just  a  new  software 
and  hardware  infrastructure. 

He  said  it  will  require  organi¬ 
zational  change  and  the  educa¬ 
tion  of  developers,  managers 
and  users  about  the  tools  sup¬ 
porting  SDM.  O  45593 


Muglia:  No  Longhorn  Before  2006 

LAS  VEGAS  hands.  Exactly  the  vehicle  we’re  go- 

Microsoft  executives  have  been  ;  ing  to  do  that,  we’re  still  working  on 
fuzzy  on  the  expected  ship  date  for  .  the  specifics, 

the  next  major  version  of  Windows. 

and  they  have  raised  the  possibility  ]  When  is  the  next  major  Win- 

of  newly  packaged  editions 
ofthe  current  client  and 
server  versions. 

Bob  Muglia,  seniorvice 
president  of  Microsoft’s  Win¬ 
dows  Server  division,  last 
week  discussed  the  compa¬ 
ny’s  options  for  Windows 
and  its  upcoming  manage¬ 
ment  offerings. 


bake  time  than  servers  do. 


dows  release,  code- 
named  Longhorn,  com¬ 
ing?  2006  is  the  earliest 
time  frame  we’re  looking  at. 

is  it  likely  that  the  client 
and  server  will  ship  at 
different  times?  They 
will  almost  always  ship  at  dif¬ 
ferent  times  in  the  future. 
Clients  need  slightly  less 


M^T 

VA'TA 


Visual  Studio.NET  2003  can  cut 
development  time  by  two-thirds, 
giving  you  more  time  to  think. 

Got  a  big  idea?  Visual  Studio*. NET  2003 
delivers  higher  productivity,  helping 
you  turn  that  big  idea  into  reality  faster 
than  you  ever  thought  possible.  Want 
proof?  Visual  Studio  .NET  enabled 
Xerox  Global  Services  to  bring  the 
v2.0  release  of  its  CentreWare  Web 
software  to  market  in  one-third  the 
time  compared  to  their  previous 
development  platform.  To  find  out  how 
Visual  Studio  .NET  2003  can  help  you 
quickly  turn  your  big  ideas  into  reality, 
visit  msdn.microsoft.com/visual/think 


Visual  Studio 
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Sun  Execs  Detail 
Software  Plans 

Sun  Microsystems  Inc.  plans  to 
ship  a  version  of  its  Java  Enter¬ 
prise  System  software  for  Red 
Hat  Linux  within  60  days  and  add 
Windows  and  HP-UX  releases  by 
year’s  end.  Executives  said  Sun 
will  also  detail  a  road  map  for 
identity  management  tools  in  the 
next  60  days.  [For  more  details, 
go  online:  QuickLink  45507]. 


Nortel  Places  CFO, 
Controller  on  Leave 

Nortel  Networks  Ltd.  said  it  has 
put  its  chief  financial  officer  and 
controller  on  paid  leaves  of  ab¬ 
sence  while  an  audit  committee 
reviews  the  company’s  financial 
results  for  last  year.  The  leaves 
of  absence  were  initiated  one 
week  after  Nortel  disclosed  that 
it  likely  will  have  to  revise  the 
2003  results. 


Veritas  to  Restate 

Veritas  Software  Corp.  said  it  will 
restate  its  financial  results  for 
2001  and  2002  after  an  internal 
investigation  showed  shortcom¬ 
ings  in  its  accounting  practices 
for  those  years.  Veritas  will  also 
revise  its  results  for  last  year. 


MARK  HALL  ■  ON  THE  MARK 

Server  Load  Balancers 
Obsolete  in . . . 

. . .  less  than  two  years.  That’s  the  prediction  of  Craig  Stouffer,  marketing 
vice  president  at  Redline  Networks  Inc.,  who  claims  that  multifunc¬ 
tion  appliances  are  clearing  out  the  clutter  of  “Web  tier  front-end  sys¬ 
tems.”  Stouffer  says  that  his  Campbell,  Calif. -based  company’s  release 


on  March  31  of  the  Redline  E|X  Version 
3.3  all  but  puts  the  nail  in  the  coffin  of  sin¬ 
gle-minded  load  balancers  for  large-scale 
Web  operations.  Not  unlike  the  folks  at 
Santa  Clara,  Calif.-based  NetScaler  Inc. 
mentioned  here  last  week  [QuickLink 
45413],  Redline  is  packing  SSL  accelera¬ 
tion,  HTTP  security,  authentication  and 
authorization  features  into  its  box  along 
with  caching,  connection  management 
and  server  load  balancing.  The  new  re¬ 
lease  also  adds  self-healing  mesh  technology 
to  a  rack  of  up  to  64  of  these  appliances 
so  no  site  visitor  ever 
loses  his  place  online, 
even  in  the  midst  of  en¬ 
tering  data  on  a  page.  If 
a  Redline  box  crashes  in 
the  middle  of  a  transac¬ 
tion,  another  slips  in  to 
complete  the  deal.  The 
3.3  upgrade  is  free  to  ex¬ 
isting  users.  ■  While  on 
the  subject  of  free,  book¬ 
mark  www.globalspec. 
com,  a  great  technology 
information  site.  Run  by 
GlobalSpec  Inc.  in  Troy, 

N.Y.,  the  site  caters  to 
the  engineering-oriented 


looking  for  details  on  all  manner  of  tech 
gear.  It  maintains  catalog  data  from  10,000 
high-tech  firms  in  its  database,  which 
you  can  search  for  free.  On  Thursday,  the 
company  will  add  The  Engineering  Web 
to  its  information  motherlode.  It  indexes 
100,000  technology  Web  sites  containing 
20  million  pages  of  mind-numbing  data  that 
you  can’t  live  without.  CEO  Jeff  Killeen 
says  that  technologists  get  frustrated  by 
searching  online  with  general-purpose 
search  engines.  “When  you  do  a  search 
on  gyros,  you  don’t  want  to  see  informa¬ 
tion  on  sandwich  shops,” 
he  quips.  (Of  course,  that 
would  depend  on  how 
hungry  you  are.)  Unlike 
Google  and  other  search 
companies  that  take 
money  from  vendors 
to  place  their  informa¬ 
tion  at  the  top  of  search 
results,  GlobalSpec 
lists  its  discoveries  in 
alphabetical  order.  “We 
couldn’t  think  of  a  fairer 
way,”  Killeen  says.  Fair 
enough.  ■  Need  a  new 
hobby?  How  about  spam  re¬ 
venge?  That’s  one  of  the 


side  benefits  behind  the  release  of  the  an¬ 
tispam  tool  Spamfire  1.5  for  the  client, 
with  a  server  version  due  by  summer  and 
a  hosted  Spamfire  option  ready  next 
month.  Michael  Herrick,  CEO  of  Matter- 
form  Media  Inc.  in  Espanola,  N.M.,  said 
Spamfire  can  send  an  untraceable  re¬ 
sponse  to  spammers,  pestering  them  with 
a  nonsense  message  every  10  seconds. 

The  software  also  includes  the  spam  crime 
reporter  feature  that  manages  your  end¬ 
less  unsubscribe  clicks  and  tracks  down 
spammers  that  have  illegally  ignored 
your  request.  As  Herrick  puts  it,  “The 
CAN-SPAM  Act  actually  legitimizes  spam,” 
but  you  can  at  least  use  the  one  tough 
provision  of  the  legislation,  the  legal  mus¬ 
cle  now  behind  unsubscribe  compliance, 
and  get  more  than  simple  revenge.  You 
might  get  some  lawsuit  money  as  well. 

■  Once  hackers  steal  passwords  they  can  get 
to  sensitive  data  on  your  systems  from 
any  PC  in  the  world.  For  now.  Later  this 
year  expect  to  see  PC  suppliers  that  use 
core  system  technology  from  Phoenix 
Technologies  Ltd.  in  Milpitas,  Calif.,  pre¬ 
load  their  computers  with  Trust  Connec¬ 
tor,  which  encrypts  a  unique  and  chang¬ 
ing  key  into  the  system’s  read-only  mem¬ 
ory.  Servers  can  request  the  key  from  the 
PC  or  laptop  to  ensure  that  not  only  is  the 
password  acceptable,  but  the  machine  is, 
too.  ■  Ektron  Inc.  in  Amherst,  N.H.,  is 
well  under  way  turning  its  content  man¬ 
agement  software  into  a  top-to-bottom 
.Net  application.  The  CMS400.Net  prod¬ 
uct  will  be  ready  by  June,  says  CEO  Bill 
Rogers.  He  says  going  all  .Net  makes  the  ap¬ 
plication  more  secure  since  you  can  define 
the  rights  of  all  .Net  code.  COM  objects, 
on  the  other  hand,  can  run  amok  on  a 
server  if  accessed  by  hackers  or  malcon¬ 
tents.  O  45582 


Smooth  asSlIk 


If  your  Citrix  MetaFrame  or  Or¬ 
acle  Forms  applications  are 
running  roughly,  consider 
SilkPerformer  6.5.  The  nonin- 
trusive  testing  tool  will  add 
those  environments  to  its  capa¬ 
bilities  when  the  upgrade  ships 
this  week  from  Segue  Software 
Inc.  in  Lexington,  Mass.  Not 
only  do  you  get  load  tests  for 
performance  but  also  you’ll 
have  real-time  app  monitoring. 
Pricing  starts  at  S30,000. 


Computerworld ’s  Mai^ran  Johnson 
Recognized  for  Editorial  Courage 


BY  DON  TENNANT 

NEW  YORK 

Computerworld  editor  in  chief 
Maryfran  Johnson  last  week 
was  honored  with  a  national 
business  journalism  award  in 
recognition  of  her  steadfast 
adherence  to  the  “goal  of  plac¬ 
ing  readers  first  and  maintain¬ 
ing  independent,  honest,  and 
ethical  journalism.” 

The  Timothy  White  Award 
was  presented  to  Johnson  at 
an  American  Business  Media 
luncheon  here.  Johnson  was 
the  first  recipient  of  the  pres¬ 


tigious  award,  which  made  its 
debut  at  the  50th  Annual  Neal 
Awards  ceremony  held  to  rec¬ 
ognize  excellence  in  business 
journalism. 

The  award  was  named  for 
the  longtime  editor  of  Bill¬ 
board  magazine  who  was 
considered  the  conscience  of 
that  publication  and  who  suc¬ 
cumbed  to  a  heart  attack  in 
June  2002.  It  was  presented  to 
Johnson  by  White’s  widow,  Ju¬ 
dith  Garlan  White. 

The  award  cited  several 
demonstrations  of  Johnson’s 


courage  and  integrity,  includ¬ 
ing  a  June  2001  editorial  on 
Oracle  Corp.’s  decision  to  can¬ 
cel  a  large  amount  of  advertis¬ 
ing  after  Computerworld  pub¬ 
lished  a  series  of  articles  on 
Oracle’s  unpopular  pricing 
policies  [QuickLink  21296]. 
Also  cited  was  an  October 
2003  editorial  titled  “Ethics 
and  Influence.”  In  it  Johnson, 
prompted  by  a  Computerworld 
story  on  ethical  questions 
raised  by  Microsoft  Corp.’s 
sponsorship  of  a  Forrester  Re¬ 
search  Inc.  report,  drew  atten¬ 


tion  to  the  role  played  by  the 
media  itself  and  its  “spotty 
record  in  asking  enough  of  the 
right  questions  about  the  pedi¬ 
gree  of  the  research  we  report 
on”  [QuickLink  42153]. 

“Upholding  the  editorial 
integrity  of  the  work  Comput¬ 
erworld  does  is  already  a  privi¬ 
lege  for  me,  as  is 
leading  the  outstand¬ 
ing  group  of  journal¬ 
ists  we  have  here,” 

Johnson  said.  “This 
award  is  a  great  hon¬ 
or  for  us  all,  but  it’s 
also  a  wonderful  re¬ 
minder  of  how  im¬ 
portant  it  is  to  keep 
our  readers  fore¬ 
most  in  everything 
we  do.” 


“This  is  testimony  to  our 
editorial  mission  to  be  the 
voice  of  IT  management,”  said 
Bob  Carrigan,  CEO  of  Com¬ 
puterworld  Inc.  “We  want  to 
be  the  most  trusted  source  for 
IT  management,  and  it’s  grati¬ 
fying  that  such  a  prestigious 
organization  feels  that  our  edi¬ 
torial  leader  stands 
above  all  others  in 
terms  of  trust  and  in¬ 
tegrity  in  journalism.” 

Also  at  the  Neal 
Awards  ceremony, 
Computerworld  was 
honored  as  a  finalist 
in  the  category  “Best 
single  issue  of  a 
newspaper/news 
tabloid”  for  its  July  7, 
2003,  issue.  O  45605 


CW’S  MARYFRAN 
JOHNSON  won  the 
Timothy  White 
Award. 
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Linux  Push  Breathes  New  Life 
Into  Novell  for  Some  IT  Execs 


Users  give  NetWare  another  chance; 
product  integration  moves  on  tap 


BY  MATT  HAMBLEN 

TTENDEES  AT  Novell 
Inc.’s  BrainShare 
conference  this  week 
will  hear  more  prod¬ 
uct  announcements  related  to 
the  company’s  Linux  strategy, 
but  the  bigger  news  may  be  the 
smiling  faces  of  Novell  officials 
and  many  users. 

The  reason:  After  suffering 
through  a  protracted  period  of 
decline,  Novell  and  its  flagship 
NetWare  technology  have  ac¬ 
quired  new  life  following  the 
company’s  purchases  of  Linux 
software  vendors  Ximian  Inc. 
and  SUSE  Linux  AG,  several 
users  and  analysts  said. 

In  fact,  some  users  who  pre¬ 
viously  had  bad  impressions 
of  Novell  are  now  buying  its 
products  because  of  its  Linux- 
oriented  strategy,  said  lames 
Taylor,  a  consultant  at  The 
East  Cobb  Group  Inc.  in  Mari¬ 
etta,  Ga.  For  example,  Taylor 
said,  a  medical  device  maker 
that  he  wouldn’t  name  is  in¬ 
stalling  six  NetWare-based 
servers  for  file  and  print  func¬ 
tions,  plus  six  Linux  servers 
that  are  running  NetWare  ser¬ 
vices  under  the  open-source 
operating  system. 

Boscov’s  Department  Store 
LLC  in  Reading,  Pa.,  gave  up 
on  NetWare  several  years  ago, 
said  Joe  Poole,  manager  of 
technical  support  at  the  40- 
store  retail  chain.  But  he  and 
other  IT  managers  at  Boscov’s 
met  with  a  Novell  salesman 
last  week  to  discuss,  among 
other  things,  the  possible  use 
of  Linux  on  its  1,200  desktops. 

“We  did  write  Novell  off 
with  NetWare,”  Poole  said, 
noting  that  Boscov’s  primarily 
migrated  to  Windows-based 
servers.  “But  I’m  more  excited 
about  SUSE  than  ever  before 
because  of  Novell’s  purchase 
of  them.”  He  added,  though, 
that  SUSE  users  may  have  to 
pay  higher  prices  to  Novell. 


A  spokesman  for  Novell 
wouldn’t  disclose  details 
about  product  announcements 
due  to  be  made  at  BrainShare, 
which  is  being  held  in  Salt 
Lake  City.  But  he  said  Novell 
plans  to  highlight  “synergies 
between  the  products  of  com¬ 
panies”  it  has  acquired. 

Taylor  said  he  expects  Nov¬ 
ell  to  announce  that  it  has  inte¬ 
grated  its  ZENworks  manage¬ 
ment  software  with  Ximian’s 
Red  Carpet  Enterprise  tools  to 
offer  improved  management  of 
Linux  PCs,  a  pairing  that  sev¬ 
eral  users  are  also  anticipating. 

Earl  Perkins,  an  analyst  at 


TOEs  installed  to 
reduce  TCP/IP 
processing  loads 


BY  LUCAS  MEARIAN 

Network  interface  cards  that 
can  open  up  more  bandwidth 
for  transporting  data  between 
storage  devices  and  applica¬ 
tion  servers  are  making  in¬ 
roads  with  corporate  users,  as 
prices  fall  and  the  Internet 
SCSI  protocol  catches  on. 

Users  and  analysts  said 
prices  for  the  TCP/IP  offload 
engines,  or  TOEs,  have  fallen 
below  $500  in  some  cases, 
down  from  about  $1,000  when 
they  emerged  two  years  ago. 

Some  IT  managers  said 
they’re  waiting  for  broader 
adoption  of  the  iSCSI  data 
transport  protocol  before  in¬ 
stalling  TOEs  on  high-end 
servers.  But  using  the  cards  on 
smaller  systems  makes  sense 
at  current  prices,  they  added. 

Mike  MacNeill,  director  of 
technical  operations  at  Cross 


Meta  Group  Inc.,  said  users 
should  also  expect  products 
that  bring  together  pieces  of 
the  technology  Novell  has  ac¬ 
quired  with  its  security,  identi¬ 
ty  management  and  Web  appli¬ 
cation  development  software. 

More  centrally,  however, 
Novell’s  Linux  drive  has  refo¬ 
cused  the  company  and  revi¬ 
talized  its  core  NetWare  ser¬ 
vices  as  a  companion  to  SUSE 
Linux,  Perkins  said.  “This 
gives  promise  to  anybody  who 
wants  to  listen  that  there  is  an 
operating  system  on  par  with 
Microsoft  for  Linux,”  he 
added.  “I  see  a  lot  of  spring  in 
the  step  at  Novell.” 

Still,  some  users  will  have 
pointed  questions  for  Novell 
executives  at  BrainShare.  For 


Country  Healthcare  Inc.  in 
Boca  Raton,  Fla.,  said  he’s  us¬ 
ing  six  iSCSI  TOEs  made  by 
Adaptec  Corp.  to  cut  the  CPU 
utilization  on  his  Microsoft 
Exchange  e-mail  and  Oracle 
database  servers  by  up  to  15%. 

The  systems  are  backed  up 
to  two  Network  Appliance  Inc. 
file  servers  over  an  iSCSI- 
based  storage-area  network, 
which  MacNeill  said  he  chose 
because  it’s  five  times  less  ex¬ 
pensive  than  a  Fibre  Channel 


TCP/IP  Offload 
Engines 

■  Typically  cost  about  one  quar¬ 
ter  the  price  of  Rbre  Channel 
host  bus  adapters 

■  Use  Ethernet  networks  to 
transport  block-level  data 

■  Can  offload  up  to  60%  of 
TCP/IP-related  processing  from 
an  application  server’s  CPU 

■  Support  encryption  technolo¬ 
gies,  such  as  the  IPSec  protocol 


example,  George  Raetzke,  a 
senior  systems  programmer  at 
Northern  Illinois  University 
(NIU)  in  DeKalb,  said  he 
wants  to  know  “exactly  what 
are  the  pluses  and  minuses  of 
running  different  NetWare  ser¬ 
vices  on  the  NetWare  or  the 
Linux  kernel.  Of  course,  that’s 
politically  a  hard  thing  for 
them  to  answer.” 

Raetzke  wants  to  be  able  to 
justify  moving  NIU’s  NetWare 
services  to  Linux  but  can’t  if 
“we  have  to  spend  hundreds 
of  man-hours  to  get  something 
that  provides  only  a  3%  im¬ 
provement  in  performance.” 

Buying  SUSE  “was  definite¬ 
ly  a  good  direction”  for  Novell 
to  take,  said  Brad  Staupp,  a  se¬ 
nior  support  analyst  at  John- 


SAN  and  far  less  complex. 

“The  only  reason  we’re  buy¬ 
ing  TOE  cards  is  because  of 
iSCSI,”  MacNeill  said.  The 
amount  of  data  that  the  health 
care  staffing  firm  needs  to 
store  on  its  SAN  is  growing 
rapidly.  “Especially  with  Sar- 
banes-Oxley  driving  [e-mail 
retention],  we  expect  to  hit 
close  to  10TB  of  capacity  by 
the  end  of  this  year,”  he  said. 

Tony  Asaro,  an  analyst  at 
Enterprise  Storage  Group  Inc. 
in  Milford,  Mass.,  said  the 
combination  of  iSCSI  and 
TOEs  is  becoming  more  wide¬ 
ly  deployed.  Asaro  said  he 
knows  of  more  than  300  iSCSI 
SANs  in  production  use,  al¬ 
though  he  didn’t  have  any  sta¬ 
tistics  on  TOE  adoption. 

Alacritech  Inc.  in  San  Jose 
this  month  released  a  TOE 
that  uses  Microsoft  Corp.’s 
iSCSI  driver  and  has  a  list 
price  of  $599.  Intel  Corp.  and 
Adaptec  in  Milpitas,  Calif, 
released  similar  products 
last  year  at  prices  ranging 


Users  Look  to  Cut  Storage  CPU 
Utilization  With  Network  Cards 


NEW  SOFTWARE 


Novell  announced  these 
products  at  last  week’s  CeBIT 
show  in  Germany. 

■  SUSE  Linux  9.1  Personal  and  ' 
Professional  editions,  both 
based  on  the  Linux  2.6  kernel. 
Priced  at  $29.95  and  $89.95, 
respectively. 

■  GroupWise  6.5,  an  upgrade  of 
Novell’s  end-user  collaboration 
software  that  will  run'on  Linux 
separately  from  NetWare. 

No  charge  for  existing  Group- 
Wise  users. 


■  ZENworks  Patch  Manage' 
ment,  an  add-on  to  ZENworks  ■ 
systems  management  software. 
Priced  at  $18  per  device. 


son  County  Community  Col¬ 
lege  in  Overland  Park,  Kan.  He 
added  that  he’s  worried  about 
centralized  desktop  manage¬ 
ment,  but  he  hopes  that  will 
be  addressed  by  the  expected 
integration  of  ZENworks  and 
Red  Carpet.  O  45596 


from  $400  to  $600. 

Analysts  said  TOE  technol¬ 
ogy  should  receive  another 
boost  when  Microsoft  ships  a 
native  software  driver  that 
will  provide  a  standard  inter¬ 
face  between  the  devices  and 
server  versions  of  Windows. 
But  that’s  not  imminent. 
Microsoft  said  the  TOE  archi¬ 
tecture  is  due  for  delivery  at 
about  the  same  time  as  the 
Longhorn  version  of  Win¬ 
dows,  now  expected  in  2006 
(see  story,  page  5). 

Joseph  Meier,  chief  technol¬ 
ogy  officer  at  Stargate  Digital 
in  South  Pasadena,  Calif.,  is  us¬ 
ing  Alacritech  TOEs  on  16  of 
his  file  servers  with  direct- 
attached  storage  in  an  effort  to 
reduce  CPU  utilization  by  up 
to  60%  while  transmitting 
video  streams  to  TV  networks. 

The  visual-effects  company 
moves  a  large  number  of  high- 
resolution  video  frames,  Meier 
said.  “Consequently,  our  serv¬ 
ers  were  spending  a  lot  of  time 
doing  TCP/IP  housecleaning.” 

Meier  said  the  TOEs  have 
generated  a  return  on  invest¬ 
ment  by  eliminating  the  need 
to  install  a  Fibre  Channel 
SAN.  “So  far,  they’ve  proven 
their  utility,”  he  said.  O  45398 
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Are  You  In  Sync  With  Your  Office? 

Wireless  Sync  Frem  Verizon  Wireless  Keeps  You  Connected. 


Wireless  Sync  allows  your  workforce  to  stay  connected  to  important  e-mail,  schedules  and  contacts  while  outside  the  office. 
By  using  Wireless  Sync  and  the  latest  PDA’s  and  Smartphones  from  Verizon  Wireless,  you  can  help  your  workforce  take  care  of 
business  at  all  times.  Another  example  of  why,  for  all  your  company’s  wireless  needs,  we  mean  business. 


Contact  our  business  representatives  at  1.866.899.2862  or  log  on  to  verizonwireless.com. 


Network  not  available  in  all  areas.  ©2004  Verizon  Wireless 
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The  power  to  control  pretty  much  everything 

A  constantly  changing  business  needs  IT  that  changes 
with  it.  HP  OpenView  management  software,  used  by  every 
Fortune  100  company,  lets  you  see,  control  and  automate 
a  mixed  IT  environment  from  any  location.  The  result? 

Your  IT  stays  in  sync  with  the  demands  of  your  business, 
and  suddenly  change  doesn’t  seem  like  such  a  scary  thing. 
www.hp.com/info/openview 
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SEC  Considers  Rules 
For  Trade  Automation 


Seeks  feedback  on  straight-through 
processing,  faster  settlement  cycles 

Margaret  Draper  acknowl¬ 
edged  that  it  would  be  a  chal¬ 
lenge  to  get  financial  manage¬ 
ment  firms  to  spend  money  on 
STP  technology  when  a  return 
on  investment  may  not  be  as 
obvious  for  them  as  it  is  for 
the  investment  banks  that  sell 
stocks.  “But  we’re  working 
with  the  buy  side,”  Draper 
said.  “It’ll  be  a  more  efficient 
process  all  around.” 

The  SEC’s  proposals  in¬ 
clude  creating  a  new 
rule  requiring  broker¬ 
ages  to  complete  the 
trade  confirmation  and 
affirmation  process  on 
the  date  a  trade  takes 
place,  or  T+0.  In  addi¬ 
tion,  the  SEC  said  it’s 
seeking  feedback  on  re¬ 
ducing  the  settlement 
cycle  from  the  current 
three  days  to  one,  or 
T+1.  The  commission 
originally  said  it  might 
create  new  rules  man¬ 
dating  the  use  of  STP 


and  T+1  two  years  ago  [Quick- 
Link  29950]. 

“This  kind  of  thing  is  going 
to  generate  push-back.  It’s  real 
simple:  Brokers 
don’t  want  to  do  in 
dustry  projects,” 
said  TowerGroup 
analyst  Robert  lati, 
referring  to  IT  in¬ 
vestments  that  are 
widespread  and 
don’t  offer  any  differentiation. 

Needham,  Mass.-based 
TowerGroup  estimates  that 
achieving  T+1  would  cost  the 
financial  services  industry 


MORE  ONLINE 

Get  additional  coverage  of  the 
financial  services  industry: 

O  QuickLink  q3670 
vwvw.computerworid.com 
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The  SEC  is  seeking  comment 
on  several  IT-related  proposals. 


more  than  $8  billion.  “Just 
when  money  becomes  avail¬ 
able,  why  throw  it  at  some¬ 
thing  industrywide,  boring 
and  that  doesn’t  create  a  com¬ 
petitive  advantage?”  lati  said. 

Even  the  SIA  isn’t  pushing 
hard  for  adoption  of  T+1  set¬ 
tlements.  Two  years  ago,  the 
trade  group  rescinded  a  mid- 
2005  deadline  it  had  set  for  the 
industry  to  move  to 
T+1  in  favor  of  pro¬ 
moting  STP,  which 
involves  creating 
interconnected 
networks  that  let 
_  data  flow  from  bro¬ 
kers  and  dealers  to 
the  back-end  systems  of  banks, 
brokerages  and  clearinghous¬ 
es.  Currently,  many  broker¬ 
ages  still  use  fax  machines  and 
phones  to  handle  that  process. 

Boston-based  Omgeo  LEG 
offers  a  trade-matching  ser¬ 
vice  that  acts  as  a  central  hub 
and  manages  the  electronic 
handshakes  between  systems 
at  different  companies.  Lee 
Cutrone,  managing  director  of 
industry  relations  at  Omgeo, 
said  he  sees  the  SEC’s  move  as 
“a  very  positive  thing”  be¬ 
cause  it  refocuses  the  indus¬ 
try’s  attention  on  STP. 

“There  were  some  folks 
who  were  saying,  ‘OK,  there’s 
no  date,  so  let’s  back-burner 
this,’  ”  said  Cutrone.  O  45588 


Cisco  Expands  Switch  Line, 
Supports  10  Gigabit  Ethernet 


IBM  Sets  Target  of 
40,000  Linux  PCs 

IBM  hopes  to  have  40,000  Inter¬ 
nal  desktop  Linux  users  by  year’s 
end  as  part  of  a  push  to  Install  the 
open-source  operating  system  on 
Its  client  devices  [QuickLink 
44121],  said  Scott  Handy,  IBM’s 
vice  president  of  worldwide  Linux 
strategy.  But  some  users  may  not 
save  money  by  switching  to  Linux 
PCs,  Handy  added  while  speaking 
at  the  Open  Source  Business 
Conference  in  San  Francisco. 


European  Officials 
List  Oracle  Concerns 

The  European  Commission  con¬ 
firmed  that  it  has  sent  Oracle 
Corp.  a  statement  of  objections 
about  the  company’s  proposed 
takeover  of  PeopleSoft  Inc.  The 
statement,  a  normal  part  of  merg¬ 
er  reviews  by  the  commission, 
lists  reasons  why  the  hostile  bid 
could  harm  software  competition 
in  Europe.  Oracle  said  it  was 
“pleased  to  have  clarity  on  what 
the  commission’s  key  issues  are.” 


Microsoft  Aims  to 
Localize  XP,  Office 

Microsoft  Corp.  said  it  plans  to 
work  with  government  bodies  in 
various  countries  to  make  Win¬ 
dows  XP  and  Office  Standard  Edi¬ 
tion  2003  available  in  more  lan¬ 
guages.  The  company  will  offer 
Language  Interface  Packs  that 
can  be  installed  on  top  of  the  two 
products  to  provide  localized  lan¬ 
guage  support.  Microsoft  said  it 
hopes  to  double  the  number  of 
supported  languages,  to  about  80. 


Short  Takes 

AFFILIATED  COMPUTER  SERVICES 
INC.  in  Dallas  said  it  has  signed  a 
10-year  deal  to  manage  some  of 
the  IT  systems  and  business  oper¬ 
ations  at  General  Electric  Co.’s 
shared  financial  service  center  in 

Fort  Myers,  Fla _ SAP  AG  plans 

to  start  reselling  the  Crystal  En¬ 
terprise  reporting  tools  as  part  of 
a  deal  with  Business  Objects  SA. 


BY  LUCAS  MEARIAN 

HE  U.S.  Securities 
and  Exchange  Com¬ 
mission  is  weighing 
the  idea  of  mandat¬ 
ing  that  financial  services 
firms  shorten  their  stock-trade 
confirmation  and  settlement 
cycles  and  fully  automate  ex¬ 
changes  of  settlement  data. 

The  SEC  on  March  11  issued 
a  letter  seeking  comments 
on  a  variety  of  proposals  for 
improving  the  security  and 
efficiency  of  the  trade  settle¬ 
ment  system  and  helping  com¬ 
panies  do  straight-through 
processing  (STP)  of  trades 
with  one  another. 

In  a  statement  last  week, 
John  Panchery,  managing  di¬ 
rector  of  systems  and  technol¬ 
ogy  at  the  Securities  Industry 
Association  in  New  York, 
lauded  the  SEC’s  effort  “to 
streamline  the  pipeline  used 
for  handling  securities  trans¬ 
actions.” 

However,  SIA  spokeswoman 


BY  MATT  HAMBLEN 

Cisco  Systems  Inc.  last  week 
announced  a  series  of  addi¬ 
tions  to  its  Catalyst  switch 
line,  including  devices  with  10 
Gigabit  Ethernet  capabilities. 

For  example,  a  new  Catalyst 
3750  edge  switch  with  a  10 
Gigabit  Ethernet  uplink  port  is 
due  for  release  late  this  month 
at  a  starting  price  of  $20,000. 
Cisco  also  introduced  two  10 
Gigabit  Ethernet  modules,  one 
for  use  with  copper  cables  in 
data  centers  at  distances  of  up 
to  15  meters  for  clustering 
servers  and  other  IT  equip¬ 
ment.  The  other  module  sup¬ 
ports  multimode  fiber  installa¬ 
tions  covering  distances  of  up 
to  300  meters,  Cisco  said.  The 


two  products  are  priced  at 
$600  and  $4,000,  respectively. 

McGill  University  in  Mon¬ 
treal  has  been  beta-testing  20 
Catalyst  3750s  with  the  10  Gi¬ 
gabit  Ethernet  uplink  capabil¬ 
ity  for  the  past  two  months, 
said  C)uan  Nguyen,  associate 
director  of  systems  engineer- 

OTHER  ANNOUNCEMENTS 


CATALYST  6500:  Upgraded 
supervisor  engine,  plus  a  48-port 
Gigabit  Ethernet  module  and  soft¬ 
ware  updates  supporting  content 
switching.  SSL.  IPsec  VPNs  and 
network  analysis. 

CATALYST  4500: 4510R  chassis 
with  10  slots,  plus  a  new  Supervisor 
Engine  V  device. 


ing  at  the  school.  McGill  is 
trying  to  expand  the  amount 
of  available  bandwidth  be¬ 
tween  its  music  performance 
venues  and  recording  studios, 
so  student  recording  engi¬ 
neers  can  take  live  video  and 
audio  streams  from  the  perfor¬ 
mance  halls  via  IP  and  mix 
them,  Nguyen  said. 

“We’re  doing  high-end  au¬ 
dio  and  video  research,”  he 
said.  “We  keep  pushing  more 
bandwidth  to  the  music  de¬ 
partment,  but  they  keep  ask¬ 
ing  for  more.”  Nguyen  noted 
that  the  school  uses  a  total  of 
about  700  Cisco  switches  and 
sees  no  need  to  consider  alter¬ 
native  vendors. 

High  costs  have  been  a  ma¬ 
jor  factor  in  slowing  the  adop¬ 
tion  of  10  Gigabit  Ethernet 
technology,  said  Zeus  Kerra- 
vala,  an  analyst  at  The  Yankee 
Group  in  Boston.  But  the  situ¬ 


ation  is  changing  as  prices  fall, 
he  said,  adding  that  10  Gigabit 
Ethernet  now  “is  going  into 
the  general  enterprise,  not  just 
academic  settings.” 

Health  Net  Inc.  recently  de¬ 
ployed  new  network  analysis 
software  modules  that  Cisco 
also  announced  last  week  for 
its  Catalyst  6500  switch  line 
(see  chart).  HealthNet  is  using 
the  software  on  six  Catalyst 
6500s  to  do  remote  trouble¬ 
shooting  and  analysis  of  voice- 
over-IP  services,  said  Jeff 
Jacobs,  a  senior  network  de¬ 
sign  engineer  who  works  at 
the  company’s  data  center  in 
Sacramento. 

The  network  analysis 
software  “has  solved  a  lot  of 
different  requirements,  since 
it  didn’t  require  new  manage¬ 
ment  tools  or  rack  space  or 
much  of  a  learning  curve,” 
Jacobs  said.  O  45591 
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Users  Cite  Promise, 

Higher  sales  are  among  the  potential 
benefits,  but  usage  issues  can  be  vexing 


Periis  of  CRM  Apps 


BY  MARC  L.  SONOINI 

BALTIMORE 

Despite  lingering  skepticism 
about  the  effectiveness  of 
CRM  applications,  some  users 
last  week  said  the  software 
can  provide  payoffs  such  as 
higher  sales,  improved  effi¬ 
ciency  and  increased  cus¬ 
tomer  satisfaction  —  if  it’s 
used  in  the  right  way. 

That  was  the  catch  cited  at 
Gartner  Inc.’s  Spring  CRM 
Summit  here  by  a  half-dozen 
IT  managers  and  other  atten¬ 
dees  whose  companies  are 
currently  in  varying  stages  of 
CRM  rollouts. 

Scot  Struminger,  vice  presi¬ 
dent  of  IT  for  corporate  head¬ 
quarters  systems  at  FedEx 
Corp.,  said  one  of  the  keys  to 
success  on  an  installation  of 
Amdocs  Ltd.’s  ClarifyCRM 
call  center  applications  was 
close  cooperation  between 
the  package-delivery  compa¬ 
ny’s  IT  staff  and  business 
managers. 

For  example,  prior  to  the 
CRM  project,  FedEx  aggregat¬ 
ed  transactions  with  corporate 
customers  at  the  overall  ac¬ 
count  level.  But  Struminger 
said  that  when  IT  workers  be¬ 
gan  talking  to  prospective  end 
users  about  the  new  software, 
they  realized  that  the  compa¬ 
ny’s  definition  of  customer  had 
to  be  changed.  “You  had  to 
capture  interaction  at  the  indi¬ 
vidual  level,”  he  said. 

Drop  in  Call  Volume 

FedEx  went  live  with  Clarify¬ 
CRM  at  its  Memphis  call  cen¬ 
ter  in  2001  and  now  has  about 
3,000  workers  using  the  appli¬ 
cations.  By  using  the  Amdocs 
software  to  push  customers  to 
the  company’s  Web  site,  and 
thus  resolve  problems  more 
quickly  and  reduce  the  need 
for  follow-up  phone  calls, 
FedEx  has  cut  its  daily  total 
number  of  incoming  calls  by 
89,000  to  about  600,000  —  a 
13%  decrease. 

But  CRM  software’s  ability 
to  help  users  process  calls 


more  quickly  or  sell  more 
products  to  customers  aren’t 
the  only  priorities  that  IT 
managers  have  to  worry 
about,  Struminger  noted.  “It’s 
not  all  about  the  [call]  handle 
time,”  he  said.  “The  customer 
is  hard  to  acquire,  and  you 
should  treat  them  the  way 
they  want  to  be  treated.  The 
software  is  a  tool,  but  CRM  is 
a  whole  culture.” 

Another  way  of  making 
such  a  system  work  is  to  re¬ 
quire  that  the  workers  using 
the  software  be  accountable 


rr  execs  cite  poor 
cornmimication  as 
a  barrier,  survey 
results  show 


BY  THOMAS  HOFFMAN 

Business  executives  often  are 
quick  to  point  out  the  short¬ 
comings  of  IT  managers,  in¬ 
cluding  their  inability  to  talk 
about  technology  in  business 
terms.  But  the  lack  of  align¬ 
ment  between  IT  and  business 
units  is  a  two-way  street,  ac¬ 
cording  to  survey  results  that 
were  released  last  week. 

The  survey,  done  by  New 
York-based  Deloitte  Consult¬ 
ing  and  IDG  Research  Ser¬ 
vices  in  Framingham,  Mass., 
showed  that  many  IT  man¬ 
agers  think  business  leaders 
themselves  need  to  do  a  better 
job  of  communicating  corpo¬ 
rate  strategies  and  goals  to 
their  technology  counterparts. 

Nearly  two-thirds  of  the  200 
IT  executives  polled  said  that 
ineffective  communication 
between  business  and  IT  man¬ 
agers  represents  a  significant 
or  moderate  challenge  within 
their  companies  (see  chart). 
About  half  of  the  respondents 


for  making  it  work,  said  Cyn- 
die  Beckwith,  vice  president 
of  customer  experience  at 
the  California  State  Automo¬ 
bile  Association  in  San  Fran¬ 
cisco.  The  AAA  affiliate  uses 
campaign  management  and 
analytical  CRM  applications 
from  E.piphany  Inc.  Beckwith 
said  the  tools  can  consolidate 
customer  information  from 
various  databases  and  deliver 
the  information  in  a  single 
screen  to  marketing  workers 
and  data  analysts. 

When  the  association  went 
live  with  the  software,  Beck¬ 
with  said,  it  changed  the  per¬ 
formance  goals  of  the  end 
users  and  told  them  to  use  the 


also  cited  a  lack  of  funding  for 
improving  IT/business  align¬ 
ment  as  a  big  barrier. 

Steve  Scott,  vice  president 
of  IT  at  Vision  Service  Plan  in 
Rancho  Cordova,  Calif,  said 
the  key  to  establishing  effec¬ 
tive  communications  “is  to 
have  people  who  own  that 
process  and  keep  everyone 
honest  about  their  responsibil¬ 
ity  to  keep  both 
the  IT  staff  and 
business  units 
well  informed. 

That  is  the  only 
way  we’ll  get  the 
necessary  level  of 
engagement  to  be 
successful.” 

Some  compa¬ 
nies  are  trying  to 
bridge  the  align¬ 
ment  gap  by  tin¬ 
kering  with  their 
IT  governance 
models.  For  exam¬ 
ple,  Philadelphia- 
based  Lincoln  Na¬ 
tional  Corp.  has 
taken  several  steps 
to  tighten  up  its 
governance  proce¬ 
dures  over  the 
past  12  months, 
said  Jason  Glazier, 


customer  information  stored 
in  an  E.piphany  data  mart 
in  an  effort  to  increase  the 
success  rates  of  marketing 
campaigns. 

David  Zink,  CIO  at  Blue 
Cross  &  Blue  Shield  of  Rhode 
Island,  advised  companies  in¬ 
stalling  CRM  applications  to 


UThe  software 
is  a  tool,  but 
CRM  is  a  whole 
culture. 


SCOT  STRUMINGER,  VICE  PRESI¬ 
DENT  OF  IT  FOR  CORPORATE  HEAD¬ 
QUARTERS  SYSTEMS,  FEDEX 


chief  technology  and  e-com¬ 
merce  officer  at  the  $4.6  bil¬ 
lion  provider  of  life  insurance, 
retirement  plans  and  wealth 
management  services. 

More  Oversight 

Project  managers  used  to  up¬ 
date  executives  on  big  tech¬ 
nology  investments  only  upon 
“special  request,”  Glazier  said. 

Now,  the  workers 
who  are  leading 
IT  projects  must 
report  every 
three  months  to 
Lincoln’s  seven- 
person  IT  execu¬ 
tive  steering  com¬ 
mittee  on  how 
budgets  and  de¬ 
livery  schedules 
compare  with  the 
original  plans. 

In  addition. 
Glazier  said  most 
of  the  business 
units  at  the  com¬ 
pany,  which  oper¬ 
ates  under  the 
name  Lincoln  Fi¬ 
nancial  Group, 
have  set  up  more 
rigorous  project 
approval  and  pri¬ 
oritization  proc- 


try  to  keep  the  software  as 
“vanilla”  as  possible.  “Don’t 
change  the  system  if  you  can 
help  it,”  Zink  said,  adding  that 
IT  managers  also  should  make 
sure  they  have  commitments 
of  support  from  top  corporate 
executives.  He  reported  to  the 
health  care  provider’s  chief 
operating  officer  during  its 
CRM  project. 

The  Providence-based  com¬ 
pany  in  December  went  live 
with  a  call  center  application 
from  Pegasystems  Inc.  that  re¬ 
placed  a  set  of  homegrown 
green-screen  applications. 

The  software  is  meant  to  help 
Rhode  Island’s  680,000  Blue 
Cross  &  Blue  Shield  members 
check  on  the  status  of  claims 
or  the  availability  of  fitness 
programs,  Zink  said.  O  45580 


esses  for  deciding  which  IT 
initiatives  to  fund. 

Vision  Service  Plan  also  has 
put  a  lot  of  effort  into  improv¬ 
ing  the  alignment  between  IT 
and  its  business  units,  Scott 
said.  For  instance,  prior  to 
launching  an  enterprise  archi¬ 
tecture  effort  in  early  2003, 
the  IT  department  at  the  eye 
care  benefits  provider  con¬ 
ducted  extensive  interviews 
with  business  executives  and 
other  key  end  users,  accord¬ 
ing  to  Scott. 

In  some  cases,  the  compa¬ 
ny’s  business  units  themselves 
now  provide  the  project  man¬ 
agers  for  IT  initiatives,  he 
added.  “If  we  are  not  at  the 
‘extremely  well-aligned’  level, 
we  are  fast  approaching  that 
mark,”  Scott  said. 

Nonetheless,  incorporating 
more  focused  IT  governance 
techniques  can  only  go  so  far 
toward  improving  alignment 
within  some  companies,  said 
John  Parkinson,  chief  technol¬ 
ogist  for  the  Americas  at  con¬ 
sulting  firm  Cap  Gemini  Ernst 
&  Young  U.S.  LLC. 

“It  all  depends  on  how  the 
business  views  IT,”  Parkinson 
said.  At  some  companies,  busi¬ 
ness  leaders  recognize  the  im¬ 
portance  of  investing  in  IT  to 
achieve  corporate  goals,  he 
noted.  But,  he  said,  “at  the  oth¬ 
er  end  of  the  spectrum,  busi¬ 
ness  views  IT  as  a  necessary 
evil.  ”  O  45598 


IT,  Business  Units  Look  for  Ways 
To  Better  Align  Their  Operations 


ALIGNMENT  GAP 

65% 

Said  “ineffective 
communication  of 
business  strategy  and 
goals  between 
business  management 
and  IT  management” 
is  a  significant  or  mod¬ 
erate  challenge 

10% 

Reported  that  their 
companies  have  been 
“extremely  success¬ 
ful”  at  aligning  IT 
plans  with  corporate 
strategies 

BASE:  200  IT  executives  who 
were  surveyed  last  October 


SOURCE:  DELOITTE  CONSULTING. 
NEW  YORK.  AND  IDG  RESEARCH  SER¬ 
VICES.  FRAMINGHAM.  MASS. 
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Diverse  Skills  Can  Help  IT 
Workers  Avoid  Offshore  Ax 

ITAA  workshop  stresses  advantages  of 
having  a  multidisciplinary  background 


BY  PATRICK  THIBODEAU 

ARLINGTON.  VA. 

o  THRIVE  in  today’s 
workforce,  IT  pro¬ 
fessionals  will  need 
a  mix  of  industry- 
specific  skills  and  a  multidis¬ 
ciplinary  background  as  more 
programming  and  coding 
work  is  moved  offshore. 

That  was  the  overriding 
message  at  a  workforce  forum 
last  week  coordinated  by  the 
Information  Technology  Asso¬ 
ciation  of  America.  The  work¬ 
shop  included  several  large  IT 
vendors  and  universities  with 
technology  programs. 

One  of  the  things  Microsoft 
Corp.  looks  for  in  prospective 
employees  is  people  “who  can 
think  about  the  silos  in  which 
they  have  been  educated,”  said 
Marland  Buckner,  public  poli¬ 


cy  manager  at  the  vendor.  One 
clue  that  someone  may  have 
this  ability  is  an  advanced  de¬ 
gree  in  computer  science  as 
well  as  English,  Buckner  said. 

“That  is  someone  with  skill 
sets  significantly  different 
than  the  traditional  computer- 
science  grad,”  he  said. 

At  PeopleSoft  Inc.,  the 
12,000-employee  workforce 
has  evolved  to  focus  on  indus¬ 
try-specific  approaches  that 
are  also  localized  for  interna¬ 
tional  users,  said  Steve  Eberly, 
a  vice  president  in  the  compa¬ 
ny’s  public  services  solution 
consultants  division.  “The 
workforce  has  matured  to  the 
point  where  they  have  become 
specialist  rather  than  general¬ 
ist,”  he  said.  That  means  work¬ 
ers  need  to  know  how  to  add 
business  value  in  certain  areas 


in  addition  to  having  technical 
know-how. 

The  kind  of  work  that  is 
likely  to  be  moved  offshore  is 
the  actual  “construction 
phase”  of  a  project,  where  re¬ 
quirements  can  be  spelled  out 
in  detail,  said  Eberly. 

Among  the  kinds  of  IT 
workers  that  defense  and  gov¬ 
ernment  IT  contractor 
Northrop  Grumman  Corp. 
needs  are  those  who  can  han¬ 
dle  high-end  IT  projects,  such 
as  enterprise  and  network  ar¬ 
chitects,  program  managers 
and  ERP  specialists,  said  Mari¬ 
lyn  Stewart,  the  company’s  se¬ 
nior  director  of  federal  enter¬ 
prise  solutions. 

Because  many  of  Northrop 
Grumman’s  workers  require 
security  clearances,  moving 
work  offshore  isn’t  an  option. 
The  clearance  requirement 
slows  down  hiring,  which  has 
prompted  the  company  to  em¬ 
phasize  retention  programs. 


Because  many  of 
Northrop  Grumman’s 
workers  require  security 
clearances,  moving 
work  offshore  isn’t  an 
option.  The  clearance 
requirement  slows  down 
hiring,  which  has 
prompted  the  company 
to  emphasize  retention 
programs. 


Education  programs  are 
also  broadening.  Many  univer¬ 
sities  and  colleges  offer  IT 
programs  that  bring  together  a 
range  of  disciplines  and  tech¬ 
nical  skills  to  produce  leaders 
who  can  align  technology  with 
business  needs.  Such  programs 
are  now  trying  to  gain  recogni¬ 
tion  under  a  formally  accredit¬ 
ed  program;  about  70  schools 
are  involved  in  the  effort. 

Kurt  Linberg,  dean  of  Capel- 
la  University’s  School  of  Tech¬ 


nology  in  Minneapolis,  said 
accreditation  is  necessary  to 
ensure  the  quality  of  IT  pro¬ 
grams  at  the  undergraduate 
level.  “IT  degree  programs  are 
popping  up  all  over  the  coun¬ 
try,  and  there  is  no  ability  to 
ensure  quality,”  he  said. 

Accreditation  is  important 
to  corporate  hiring  managers, 
who  sometimes  won’t  consid¬ 
er  a  job  candidate’s  academic 
records  unless  they  come 
from  an  accredited  program, 
said  Linberg. 

But  Trentwell  White,  corpo¬ 
rate  liaison  at  Chicago-based 
National-Louis  University, 
said  that  while  accreditation 
may  resound  with  human  re¬ 
sources  managers,  an  IT  hir¬ 
ing  manager  will  want  to 
know  about  a  job  candidate’s 
skills  and  expertise. 

“So  I’m  not  sure  that  accred¬ 
itation  —  which  the  education 
community  keeps  trying  to 
build  up  because  it  brings 
them  students  —  is  really  the 
key,”  said  White.  O  45599 
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For  more  resources  related  to  the  IT  job 
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Continued  from  page  1 

HP  e3000 

stop  support  is  two  and  half 
years  away,  it  has  become  an 
urgent  issue  for  some  users. 
Ken  Sletten,  who  manages 
e3000  systems  at  a  federal  gov¬ 
ernment  facility  in  Wash¬ 
ington  state  that  he  asked  not 
be  further  identified,  said 
transferring  knowledge  about 
MPE  to  a  third  party  won’t  be 
easy.  “It’s  a  pretty  complex 
process,  and  as  time  goes  on, 
the  number  of  people  within 
HP  who  know  how  to  do  this 
is  going  to  [decline  more  and 
more],”  he  said. 

Moreover,  if  users  know 
that  a  third  party  will  take 
over  source-code  support,  it 
may  allow  them  to  slow  their 
migrations  from  eSOOO  to  oth¬ 
er  systems.  “The  importance 
of  having  the  decision  this 
year  is  so  that  users  can  make 
future  plans,”  said  Paul  Ed¬ 


wards,  an  e3000  consultant  in 
Carrollton,  Texas. 

An  online  survey  released 
last  week  by  Interex,  the  Sun¬ 
nyvale,  Calif -based  HP  user 
group,  backs  the  demand  for 
quick  action  by  HP.  The  top  is¬ 
sue  cited  by  the 
223  respondents 
was  for  a  decision 
from  HP  by  the 
second  half  of  this 
year  on  licensing 
MPE  source  code 
to  one  or  more 
third  parties. 

HP  doesn’t  see 
the  need  to  make 
a  decision  this 
year,  said  David 
Wilde,  HP’s  e3000  business 
manager,  who  stressed  that 
the  company  must  act  in  “the 
best  overall  interest”  of  the 
e3000  user  base. 

Wilde  said  a  decision  to  li¬ 
cense  the  source  code  might 
prompt  some  customers  to  re¬ 
place  their  transition  plans 


with  an  alternative  that  may 
not  meet  their  needs,  simulta¬ 
neously  hurting  HP  business 
partners  that  provide  migra¬ 
tion  services.  “We  don’t  help 
anybody  if  we  do  damage  to 
that  overall  value  chain,”  he 
said. 

But  Wilde  said 
HP  is  also  sensi¬ 
tive  to  the  needs 
of  customers  who 
will  be  running 
e3000  systems 
beyond  2006.  HP 
expects  “to  make 
appropriate  ad¬ 
justments  in  our 
plans,”  he  said. 

He  said  the  com¬ 
pany  has  been  receptive  to 
customers’  needs,  citing  the 
recent  decision  to  extend  sup¬ 
port  for  MPE  Version  6.5, 
which  had  been  due  to  end 
this  year,  to  2006.  Versions  7 
and  7.5  are  also  being  support¬ 
ed  through  2006. 

The  issue  is  becoming  in¬ 


creasingly  heated.  Sletten 
raised  complaints  about  HP’s 
actions  in  e-mail  he  sent  to  a 
mailing  list,  attaching  corre¬ 
spondence  between  HP  and 
OpenMPE.  HP  subsequently 
pursued  an  effort  to  get  Open¬ 
MPE  members  to  sign  nondis¬ 
closure  agreements,  raising 
concerns  that  public  discus¬ 
sion  of  the  matter  could  be 
curtailed.  However,  Wilde  said 
members  won’t  be  blocked 
from  voicing  their  opinions 
about  user  needs. 

Domino  Effect 

Longs  Drug  Stores,  meanwhile, 
has  been  migrating  off  the 
e3000  as  part  of  a  multimil- 
lion-dollar  project,  but  Garver- 
ick  said  she  believes  the  e3000 
will  be  running  mission-criti¬ 
cal  systems  beyond  2006. 

Being  able  to  update  the 
source  code  will  be  important, 
Garverick  said.  For  instance, 
the  e3000  uses  FTP  processes, 
but  if  the  FTP  process  was 


changed  on  an  Intel-based  sys¬ 
tem,  the  e3000  code  would 
also  have  to  be  adjusted. 

Interex’s  customer  advo¬ 
cate,  Debbie  Lawson,  said  the 
e3000  user  base  may  have 
been  as  large  as  40,000  at  one 
time,  and  previous  surveys  in¬ 
dicate  that  about  75%  plan  to 
migrate  off  the  system. 

In  earlier  years,  as  many  as 
1,200  responded  to  HP  e3000 
surveys,  said  Lawson.  But  she 
believes  that  the  current  re¬ 
sponse  from  223  users  is  “a 
good  representation  of  what 
this  vocal  minority  wants.” 

HP  has  developed  programs 
to  move  users  to  its  HP  9000 
system  running  its  HP-UX 
version  of  Unix.  Lawson  said 
her  view  is  that  the  reason  HP 
is  being  noncommittal  about 
third-party  source-code  li¬ 
censing  is  that  it  “doesn’t  want 
the  migration  to  be  slowed 
down.  They  want  to  get  peo¬ 
ple  on  other  platforms  as  soon 
as  possible.”  O  45595 


H  There  is 
clearly  a 
business  case 
for  continuing 
MPE’s  life  be¬ 
yond  2006. 


DONNA  GARVERICK, 

LONGS  DRUG  STORES  CORP. 
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Got  a  mobile  or  wireless 
solution  so  good  it’s 
worthy  of  an  award? 

Nominate  it  for  Computerworld’s 
“Best  Practices  in  Mobile 
&  Wireless  Awards  Program!” 

Computerworld  is  seeking  IT  user-organization  case 
study  submissions  for  consideration  and  recognition. 


This  program  will  evaluate,  select  and  recognize  ten  Mobile  and/or  Wireless 
Technology  "Best  Practices"  based  on  case  studies  highlighting  successful  or 
noteworthy  solution  implementation  projects  and  deployments  in  the 
following  categories; 

•  Business-critical  Applications 

•  Expanding  Wireless  for  Better  ROl 

•  Business  Transformation 

•  Wireless  as  an  Advantage  for  the  Small/Medium  Business 

•  Office  of  the  Future 

Nominations  are  welcomed  from  IT  Users/Implementers;  Systems  Integrators/Consultants;  IT  vendors  on  behalf 
of  customers,  or,  their  own  In-House  Deployment;  and  PR  firms  on  behalf  of  clients.  Multiple  submissions  of  case 
studies  describing  different  deployments  per  company/organization  will  be  considered. 

Winners  will  be  featured  in  a  special  Computerworld  supplement  profiling  the  company  and  submitted  case  study. 

Submit  your  nomination  Online! 

You’ll  find  the  nomination  form  and  learn  more  about  Mobile  &  Wireless  World  at:  www.mwwusa.com 

But  hurry!  The  deadline  is  Monday,  April  12th  at  9:00pm  Eastern  time. 


BEST 

PRACTICES 

IN  MOBILE 
&  WIRELESS 


AWARDS  PROGRAM 


PRODUCED  BY: 

COMPUTERWORLD 


AWARDS  PROGRAM  SPONSORED  BY: 

CiscoSyst^  ■  1  I 


The  risks  of 


Emerging  government  regulations  are  being  enacted  at  a  rapid 
rate  and  there  is  no  end  in  sight.  The  risks  ofnoncompliance 
are  high  and  IT  departments  are  being  hit  from  all  angles.  Your 
company  is  relying  on  you  for  solutions.  Now  you  can  rely  on  us. 
The  IT  Compliance  Institute  (ITCi)-. 

Make  sure  you  have  tJie  information 
and  tools  you  need. 

ITCi’s  IT  Compliance  World,  Spring  2004,  provides  you  with 
mission-critical  information  on  emerging  regulations  that  impact 
IT,  industry  best  practices  and  case  studies,  timely  research, 
and  leading  technology  solutions.  By  delivering  high-quality, 
vendor-neutral  education  and  an  ideal  forum  for  networking 
with  peers,  ITCi  equips  you  with  tools  and  techniques  you  need 
to  save  time  and  money,  and  avoid  the  legal  ramifications  of 
noncompliance. 


noncompliance 

are  too  high 


IT  Compliance  World,  Spring  2004 

Seaport  Motel  |  World  Trade  Center 
Boston,  MA 
Mav  17-19,  2004 


Conference  Features 

•  Well-defined  tracks  on  regulations  for  privacy  and  security,  governance,  and  financial  seiwices 

•  More  than  30  courses  on  topics  such  as; 

-  IT  Risk  Vulnerability — Metrics  and  Mitigation  Strategies 

-  Aggregating  Regulatory  Requirements  to  Simplify  Compliance 

-  Preparing  for  Real-Time  Disclosure  under  Sarbanes-Oxley  Section  409 

-  Basel  II  Strategies,  from  Aggregation  to  Disclosure 

-  Anti-Money-Laundering  Strategies  (AML) — ^A  Pragmatic  Approach 

-  Processes  and  Products  for  the  USA  Patriot  Act  in  Financial  Services 

•  Solutions  Marketplace  featuring  the  latest  technologies  from  leading  vendors  and  consultancies 

•  Panel  discmsions  with  leading  experts  and  peer  networking  sessions 

•  Hospitality  suites  and  one-on-one  consulting 


IT  Compliance  Institute™ 


www.ITCinstitute.com 
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ternally.  The  mainframes  are 
already  supported  by  IBM  un¬ 
der  an  existing  outsourcing 
contract,  he  added. 

Sears  decided  to  do  more 
outsourcing  after  a  review  of 
its  IT  infrastructure  showed 


that  some  pieces  need  to  be 
improved,  Brathwaite  said. 
Working  with  CSC  on  the  im¬ 
provements  should  yield  sav¬ 
ings  that  will  let  Sears  focus 
more  resources  on  its  retail 
systems,  he  said.  O  45543 


MORE  NEWS 

Procter  &  Gamble  expands  an  outsourcing 
deal  with  Hewlett-Packard  to  include  its 
accounts  payable  operations: 

OQuickLink  45500 

www.coniputerworld.com 


Lands’  End  Inc.,  which  Sears 
acquired  in  2002.  Brathwaite 
said  Sears  will  continue  to 
manage  the  retail  systems  in- 


BY  TODD  R.  WEISS 

Following  through  on  plans 
disclosed  by  its  CIO  in  Janu¬ 
ary,  Sears,  Roebuck  and  Co.  is 
negotiating  with  Computer 
Sciences  Corp.  on  a  partial  IT 
outsourcing  deal  that’s  expect¬ 
ed  to  be  worth  about  $2  billion 
over  the  next  10  years. 

The  deal  would  give  CSC 
responsibility  for  managing 
much  of  the  IT  infrastructure 
at  Sears  and  would  affect 
about  260  of  the  retailer’s  1,160 
IT  workers,  although  Sears 
this  month  said  it  expects  CSC 
to  hire  “substantially  all”  of 
the  affected  staffers. 

A  final  agreement  should  be 
signed  during  the  second 
quarter,  according  to  Sears. 
TThe  infrastructure  technolo¬ 
gies  that  are  due  to  be  out¬ 
sourced  to  CSC  include 
servers,  desktop  PCs  and  oth¬ 
er  client  devices,  voice  and 
data  networks,  and  the  sys¬ 
tems  that  support  Sears- 
related  Web  sites.  CSC  would 
also  handle  help  desk  opera¬ 
tions  as  well  as  IT  asset  and 
risk  management,  said  Sears 
spokesman  Chris  Brathwaite. 

In  a  statement.  Sears  CIO 
Gary  Kelly  said  the  services 
provided  by  El  Segundo,  Calif.- 
based  CSC  should  “heighten 
the  stability  and  reliability  of 
Sears’  technical  infrastructure” 
and  reduce  the  cost  of  future 
IT  improvements.  He  added 
that  CSC  “will  also  provide  fair 
and  equitable  treatment”  for 
the  affected  IT  workers. 

At  a  retail  IT  conference 
two  months  ago,  Kelly  told 
Computerworld  that  he 
planned  to  outsource  some  of 
Sears’  IT  operations  to  cut 
costs  and  improve  profit  mar¬ 
gins  [QuickLink  44II2].  In  ad¬ 
dition  to  CSC,  he  named  IBM 
Global  Services,  Hewlett- 
Packard  Co.,  Electronic  Data 
Systems  Corp.  and  Affiliated 
Computer  Services  Inc.  as  the 
vendors  vying  for  the  deal. 

The  company’s  mainframes 


and  core  retail  systems  won’t 
be  included  in  the  outsourcing 
deal,  nor  will  the  separate  IT 
operations  of  catalog  retailer 


Strength  in  Numbers 


95%  of  surveyed 
customers  would 
recommend 


REMEDY" 

SERVICE  MANAGEMENT  SOLUTIONS 


Remedy  is  the  leader  in  Service  Management  solutions.  Our  numbers  speak  for  themselves. 

Yet,  there  are  other  numbers  important  to  Remedy.  Operating  cost  reductions,  improvements  in  customer 
satisfaction,  increased  employee  productivity,  shorter  time  to  value — the  bottom-Une  numbers  you  will  achieve 
by  using  Remedy’s  out-of-box  best  practice  applications  to  automate  service  management  processes. 


Your  success  depends  on  those  numbers.  Remedy  deHven  them. 

www.remedy.com/strength 

or  call  us  at  1.888.294.5757 


Remedy 

a  BMC  Software  company  ' 


Sears  Taps  CSC  for  $2B  Outsourcing  Deal 
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Great  Moments  at  Work. 

4:42  pm  You're  not  stopped  in  the  hall  and 
asked  to  pull  yet  another  up-to-the-second 
project  report. 


J004MicrosoftCorporaticm.Allri9f^lsreserved  Microsof 
lofoPath  the  Oft«ce  logo.  OneNote,Outlook  PowerPoint 
Windows  Windows  Server  Visio  and  YOur  potential  Out 
either  registered  Iraiiemarks  or  trademarks  of  Microsoft  Cl 
the  United  States  and/or  other  countries 


Introducing  the  new  Microsoft  Office  System. 

Now  users  can  do  more  for  themselves  so  you  can  focus  on 
the  important  things.  More  than  just  the  core  suite  you're 
familiar  with,  the  new  Microsoft®  Office  System  is  an  integrated 
system  of  easy-to-use,  expanded  programs,  servers,  services, 
and  solutions  that  help  end  users  be  more  self-sufficient. 
With  the  Microsoft  Office  Enterprise  Project  Management 
Solution  (including  Microsoft  Office  Project  Server  2003, 
Microsoft  Office  Project  Professional  2003,  and  Microsoft 
Office  Project  Web  Access),  users  can  have  access  and 
visibility  into  all  of  their  projects,  including  current  status, 
integrated  costs  from  business  systems,  risks,  and  all  project 
documents — all  on  their  own.  Which  might  just  be  the  most 
valuable  part  of  it  all.  To  find  out  how  the  Microsoft  Office 
System  can  work  for  you,  go  to  microsoft.com/officelT 


lyi  jC|-050ft  More  than  what  it  used  to  be,  it's  now  a 

Office  System  comprehensive,  customizable  system. 


Servers 


Programs 

Access  2003 
Excel  2003 
Frontpage®  2003 
InfoPath™  2003 
OneNote™  2003 
Outlook®  2003 


PowerPoint®  2003 
Project  2003 
Publisher  2003 
Visio®  2003 
Word  2003 


Project  Server  2003 

Live  Communications 
Server  2003 


SharePoint™  Portal 
Server  2003 


Services 

Live  Meeting 
Office  Online 

Solutions 

Solution  Accelerators 


Exchange 
Server  2003 


Enabling  Technologies: 

Windows  Server™  2003,  Windows®  SharePoint  Services. 
Rights  Management  Services 


Office 
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MARYFRAN  JOHNSON 


Privacy  Hostages 


’VE  RECENTLY  GOTTEN  HOOKED  on  a  BBC 
America  TV  program  called  What  Not  to 
Wear,  in  which  two  witty,  quintessentially 
British  “style  journalists”  single  out  some 


walking  fashion  disaster 
for  a  wardrobe  update 
and  makeover.  In  the  first 
scene,  the  show’s  hosts 
merrily  pounce  on  their 
startled  sartorial  slob, 
presenting  her  with  a  big 
check  for  an  upcoming 
shopping  spree  and  ex¬ 
plaining  how  friends  or 
relations  helped  arrange 
the  whole  ambush.  Lots 
of  shrieking  and  laughter 
ensues. 

And  then  the  hosts  drop  the  big 
bomb:  Hidden  cameras  have  been 
tracking  the  hapless  victim  in  her 
most  unsuitable  and  unflattering  out¬ 
fits,  for  all  the  world  to  see.  As  that 
realization  sinks  in,  the  makeover 
subject  suddenly  stops  laughing.  In¬ 
variably,  the  same  horrified  question 
comes  next:  “You’ve  been  secretly 
filming  me?” 

That  invasion-of-privacy  moment 
passes  quickly,  and  the  show  marches 
delightfully  onward.  But  I  wonder 
how  long  it  will  be  before  such  can¬ 
did-camera  entertainment  becomes 
flatly  illegal,  plowed  under  the  moim- 
tain  of  new  privacy  rules  and  regula¬ 
tions  enclosing  us  and  all  the  data 
generated  about  us  (streaming  video 
of  our  wardrobes  included).  I  realize 
that  data  privacy  is  vying  for  a  place 
alongside  motherhood  and  apple  pie 
in  the  public  sentiment  these  days,  but 
I  wonder  if  we  aren’t  slipping  over 
into  paranoia  as  we  try  to  build  a 
fortress  of  legal  and  technical  protec¬ 
tions  around  every  bit  of  personal  in¬ 
formation  that  gets  loose  in  the  world. 

Not  that  there’s  much  choice  any¬ 
more.  The  sheer  enormity  of  what  IT 
departments  are  facing  at  this  inter¬ 
section  of  mandated  regulatory  com¬ 
pliance,  customer  data  protection 
and  risk  management  was  starkly  evi¬ 
dent  in  our  special  report  on  privacy 
last  week  [“Compliance  Headaches,” 


MARYFRAN  JOHNSON  IS  | 

editor  in  chief  of  Comput-\ 
erworld.  You  can  contact  i 
her  at  maryfranjohnson@  i 


CJuickLink  45078].  Big 
companies  can  expect  to 
spend  millions  on  privacy 
compliance  programs 
and  activities  in  the  com¬ 
ing  years,  just  to  keep 
pace  with  existing  federal 
laws  such  as  HIPAA  and 
Sarbanes-Oxley.  Yet  legal 
precedents  are  few,  im¬ 
plementation  procedures 
are  largely  experimental, 
and  vaguely  written 

. ]  guidelines  vary  from 

state  to  state.  The  infamous  Califor¬ 
nia  Senate  Bill  1386,  which  requires 
notification  of  any  unauthorized  dis¬ 
closures  of  personal  information, 
calls  for  customer  data  to  be  encrypt¬ 
ed  but  doesn’t  specify  to  what  level. 

“Over  the  past  two  years,  we’ve 
had  over  1,000  new  privacy  laws  that 
have  affected  us,”  said  Joel  Tietz, 
chief  privacy  officer  at  AXA  Finan¬ 
cial  Services  in  New  York,  who  was 
quoted  in  our  “Privacy  Potholes”  sto¬ 
ry  [QuickLink  45101].  Like  many  com¬ 
panies,  AXA  is  using  a  CRM  system 
to  dig  into  its  customer  data  for  use¬ 


ful  trends  and  potential  revenue  op¬ 
portunities.  But  unlike  many  compa¬ 
nies,  the  financial  firm  is  being  ag¬ 
gressively  attentive  to  mapping  cus¬ 
tomer  privacy  preferences  against  a 
database  that  consolidates  multiple 
applications  and  production  systems. 

Monitoring  privacy  compliance  in¬ 
side  your  own  business  is  no  longer 
enough,  however.  Your  partners,  sup¬ 
ply  chain  vendors  and  any  other  sup¬ 
pliers  that  access  your  data  —  partic¬ 
ularly  those  offshore  and  operating 
under  looser  legal  strictures  —  are 
part  of  the  risk  that  senior  IT  man¬ 
agers  now  must  protect  against. 

So  prepare  to  be  held  hostage  to 
privacy  compliance.  Spending  in  this 
realm  will  gobble  up  increasingly 
bigger  portions  of  IT  corporate  bud¬ 
gets  in  the  years  to  come.  Larger 
companies  will  have  to  set  up  privacy 
compliance  offices,  which  will  run  up 
additional  bills  for  data  protection 
staffers,  expert  consultants  and  spe¬ 
cialized  training. 

The  only  effective  strategy  the  ex¬ 
perts  all  agree  upon  is  this:  Make 
sure  you’re  meeting  the  maximum 
requirements  of  the  strictest  privacy 
laws  affecting  your  industry. 

If  you  don’t,  you’d  better  update 
your  own  wardrobe.  Your  next  ap¬ 
pearance  might  be  on  Court  TV. 

O  45550 
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PIMM  FOX 

Storage 
Tools  You 
Can  Use 

Everyone  takes  their 
storage  requirements 

seriously.  Storage  man¬ 
agement  deserves  the  same  level  of 
attention. 

As  your  storage  capacity  increases 
and  becomes  more  varied,  it’s  crucial 
to  have  tools  that  can  get  you  real-time 
information  about  your  network-at¬ 
tached  storage,  storage-area  networks 
and  direct-attached  storage  operations. 

At  Owatonna,  Minn. -based  Federat¬ 
ed  Mutual  Insurance  Co.,  WAN/LAN 
administrator  Mark  Mielke  has  3,000 
employees  pounding  away  at  his  stor¬ 
age  systems.  He  has  a  typically  atypical 
enterprise  setup:  Xiotech  Corp.  Magni¬ 
tude  storage  arrays,  hard  drives  for 
servers,  and  cluster-type  servers  for 
file  retention,  including  customer 
records  and  applica¬ 
tions.  In  all,  depend¬ 
ing  on  how  he’s  got 
things  configured, 
there’s  anywhere 
from  2.5TB  to  5TB  of 
storage  that  has  to  be 
accounted  for,  allo¬ 
cated  and  managed. 

“We  didn’t  have 
any  good  tools  to 
look  into  what  we 
were  doing  with 
storage,”  says  Mielke. 

“We  couldn’t  see  into  the  future.” 

And  that’s  the  story  with  storage, 
isn’t  it?  Today  handles  itself,  but  you’ve 
always  got  to  be  one  or  two  steps 
ahead  of  your  users. 

Federated  Mutual  needed  some¬ 
thing  multifunctional  to  handle  its 
SAN  switches,  its  main  storage  units, 
its  Windows  NT  client  pieces  and  the 
Novell  side.  Those  multiple  platforms 
and  vendors  led  the  company  to  choose 
Dallas-based  Tek-Tools  Inc.  and  its 
Storage  Profiler  software. 

Mielke  says  installation  was  easy,  and 
the  tools  provide  good  analysis,  with 
the  power  to  drill  down  into  each  type 
of  data  that  Federated  Mutual  stores. 

“We  have  Storage  Profiler  giving  us 
feedback  on  servers,”  says  Mielke,  “and 
we’re  ramping  up  on  all  our  SAN 
equipment  and  our  switches.”  He’s  us¬ 
ing  SNMP  to  set  up  alert  criteria  on 
hosts  so  that  at  80%  of  capacity,  for  ex- 


PIMM  FOX  is  a  freelance 
writer  in  Santa  Barbara, 
Calif.  Contact  him  at 
piinmfox@pacben.n«t. 
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AT&T  NETWORK  SECURITY  PORTFOLIO.  Can  your  network  drive  hackers  crazy?  Can  it  keep  your  data 
accessible  24/7  to  the  people  who  need  it,  while  building  a  brick  wall  in  front  of  those  who  don’t?  AT&T 
delivers  a  broad  portfolio  of  integrated  network  security  solutions  backed  by  experts  that  assess,  monitor, 
detect  and  resolve  security  issues  before  they  become  security  breaches.  It’s  just  what  you’d  expect  from 
the  networking  company  that  carries  more  Internet  traffic  than  anyone  else  in  North  America.  In  fact,  every 
day,  our  networks  repel  thousands  of  hackers  and  send  them  back  to  the  video  arcades  from  which  they 
came.  CAN  YOUR  NETWORK  DO  THIS?  For  a  positive  answer,  just  call  1-888-889-0234. 


AT&T 

The  world's  networking  company^” 


att.com/networking  02004  ATiT 


At  any  given  moment,  your 
operations  are  vulnerable  to 
attacks.  Hackers,  viruses  and 
intrusions  can  wreak  havoc  on 
your  network  and  can  disrupt 
and  cripple  key  business 
processes  and  assets  -  costing 
your  business  time  and  money. 

AT&T  can  recommend  and 
provide  security  measures 
that  help  prevent  intruders 
from  compromising  your 
networks,  servers,  information 
and  applications  -  protecting 
your  business  by  strengthening 
the  availability  of  your  IT  and 
networking  environment. 

Now  that’s  keeping  your 
business  secure. 

•  The  fully  managed  security 
solutions  provide  simplified 
design,  deployment  and 
management. 

•  Completely  tailored  to  meet 
your  business  security  needs. 

•  Offers  significant  savings  in 
capital  and  operating  costs 
verses  a  self-managed 
solution. 

•  Provides  expert  security 
networking  and  24x7 
network  monitoring. 


AT&T’s  security  solutions  do  a  number 
on  hackers,  viruses  and  intrusions 
so  they  don’t  do  one  on  you 


AT&T  delivers  a  powerful  suite  of  integrated  security  solutions  that  can  assess 
vulnerabilities,  protect  against  unauthorized  access,  proactively  detect  attacks, 
and  rapidly  respond  to  suspicious  activities  or  events.  It’s  like  a  virtual  security 
guard  to  help  protect  your  network  from  unwanted  intruders. 

AT&T’s  Network  Security  Portfolio  offers  a  broad  array  of  services  that  include: 

•  Intrusion  detection  and  firewall  services 

•  Token  and  Public  Key  Infrastructure  (PKI)  authentication 

•  Network  scanning  services 

And  coupled  with  AT&T’s  professional  networking  expertise  in  the  area  of  ethical 
hacking,  policy  development  and  assessment  services  for  a  secure  solution. 


WHAT  THE  INDUSTRY  IS  SAYING: 

•  AT&T  [Managed  Security  Services]  was  awarded  the  Customer  Solutions 
Excellence  Award  -  “For  implementing  extremely  flexible  management 
offerings,  being  the  first  to  bring  application  security  services  to  the 
market,  and  offering  the  widest  array  of  services  in  the  industry,  AT&T 
[Managed  Security  Services]  is  awarded  the  Customer  Solutions 
Excellence  Award.”  -  Frost  &  Sullivan,  July  2003 


For  more  information,  contact  your  AT&T 
Representative,  or  visit  www.att.com/networking. 


AT&T  Network  Security  Portfolio.  0  2004  AT&T.  All  Rights  Reserved.  Printed  in  U.S.A.  AB4)164 
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i  ample,  Mielke’s  team  will  be  signaled, 
i  He  can  also  monitor  events  in  Win- 
j  dows  NT,  look  at  memory  space  on 
NetWare  and  get  a  real  view  of  each 
storage  point. 

The  tool  also  makes  it  possible  to 
normalize  data  into  common  tables  for 
enterprisewide  reports  so  there’s  less 
guesswork  about  storage  needs.  Build¬ 
ing  custom  reporting  tools  is  also 
straightforward,  using  either  Java  or 
templates  built  into  the  Profiler  suite. 

The  automotive  unit  of  Siemens  AG 
used  similar  storage  management  tech¬ 
niques  to  do  file  analysis  on  its  net¬ 
work-attached  storage  boxes,  and  it 
uses  the  same  reporting  tools  to  check 
backup  and  network  performance. 

This  new  area  of  storage  resource 
management  should  help  cut  operating 
expenses  and  help  users  get  the  most 
from  their  storage  investments. 

Big  companies  like  Siemens  can  start 
by  digesting  small  bites  of  their  storage 
strategies  and  looking  at  the  manage¬ 
ment  problem  with  an  eye  toward  re¬ 
claiming  some  of  the  storage  space 
that’s  wasted  because  of  poor  visibility. 
O  45478 

THORNTON  A.  MAY 

Tricks  of 
The  Futuring 
Trade 

Research  from  UCLA’s 
Managing  the  Informa¬ 
tion  Resource  Program 

has  brought  to  the  surface  three  high- 
value  techniques  for  planning  for  the 
future  that  are  inexpensive  to  put  into 
operation. 

D6j^i  viewing.  This  technique,  which  is 
frequently  used  to  craft  insight-pro¬ 
ducing,  behavior-changing  scenarios 
of  what  lies  ahead  and  what  actions 
should  be  taken,  involves  looking  in¬ 
tensely  at  the  current  period  and  ask¬ 
ing,  “Has  anyone  experienced  anything 
like  this  before?” 

In  a  workshop  conducted  for  the  IT 
Leadership  Academy  at  Florida  Com¬ 
munity  College  at  Jacksonville,  I  asked 
that  question  about  the  situation  that 
technology  leaders  find  themselves  in 
today.  The  assembled  decision-makers 
kicked  around  various  situations  seek¬ 
ing  analogies  and  came  up  with  the 
following: 

■  The  trip  to  hell  described  in 
Dante’s  Inferno. 

■  The  Clinton  White  House  follow¬ 


ing  the  revelations  about 
Monica  Lewinsky.  (“One 
mistake,  and  everybody 
hates  us.”) 

■  President  Bush  and 
nation-building  in  Iraq. 

(“Long,  hard  slog.  No  real 
idea  how  much  it’s  going  to 
cost  or  when  it’s  going  to 
end.”) 

Two  deja  views  had  the 
most  resonance  for  today’s 
IT  managers. 

The  first  was  the  post- 
Sputnik  era.  The  launch  of 
the  Russian  satellite  on  Oct. 

4, 1957,  shook  an  almost  universally 
held  belief  that  the  U.S.  would  always 
be  significantly  ahead  of  the  Soviet 
Union  in  all  aspects  of  science  and 
technology.  Today,  the  widely  adopted 
practice  of  outsourcing  higher-end  IT 
work  has  similarly  shaken  the  belief 
that  the  U.S.  will  always  lead  the  world 
in  computer  technology. 

The  second  was  the  first  big  man¬ 
agement-consulting  fad,  “scientific 
management,”  which  cropped  up  in 
the  early  20th  century.  Frederick  Tay¬ 
lor  synthesized  several  existing  ideas 


to  create  a  process  to  assist 
management  in  reducing 
waste  through  the  careful 
study  of  work  and  the 
adoption  of  standardized 
work  practices.  Today,  the 
processes  of  IT  are  being 
closely  studied  with  an 
eye  toward  simplification, 
standardization  and  sig¬ 
nificant  improvement  in 
productivity. 

Bringing  the  future  to  the 
present.  This  concept  in¬ 
volves  projecting  a  future 
point  in  time  and  painting  a 
picture  of  what  you  want  to  happen. 
Examples:  During  a  joint  session  of 
Congress  on  May  25, 1961,  President 
Kennedy  looked  a  decade  ahead  and 
saw  an  American  on  the  moon.  And 
following  the  Jan.  17, 1994,  Northridge, 
Calif.,  earthquake,  a  team  of  dedicated 
construction  professionals  foresaw  the 
Santa  Monica  Freeway  being  reopened 
“safely  to  the  flow  of  traffic  in  66  days,” 
even  though  some  experts  said  it 
would  take  two  years. 

IT  professionals  who  bring  the  future 
to  the  present  envision  a  bold  scenario 


that  people  don’t  believe  they  can  make 
happen,  then  they  structure  their  activ¬ 
ities  so  that  they  deliver  capabilities 
that  will  render  the  competition  irrele¬ 
vant,  on  time  and  within  budget. 

Experience  hitchhiking.  This  technique 
is  a  personified  version  of  deja  view¬ 
ing.  With  deja  viewing,  you  look  for 
broad-based  analogs.  For  example,  you 
ask  yourself  how  President  Eisenhower 
responded  to  the  challenge  of  Sputnik 
and  whether  there  are  lessons  in  that 
for  crafting  your  response  to  outsourc¬ 
ing.  With  experience  hitchhiking,  you 
seek  out  individuals  and  companies 
whose  experiences  most  closely  re¬ 
semble  a  situation  you  are  about  to  en¬ 
ter  or  are  thinking  of  entering.  Then 
you  ring  up  these  “experiencers”  and 
ask  if  you  can  hitchhike,  or  ride  their 
learning  curves. 

By  combining  these  three  tech¬ 
niques,  you  will  ride  a  limo  to  your  fu¬ 
ture,  not  someone  else’s  bus  to  a  desti¬ 
nation  you  may  not  enjoy.  O  45464 
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The  Practice  of  Intelligent  Disobedience’ 

I 


WAS  QUOTED  in  last  month’s 
Think  Tank  [QuickLink  44159] 
iaying,  “The  role  of  the  IT  organiza- 
ion  is  to  have  the  right  solution  to 
he  business  problem,  not  to  decide 
vhat  really  needs  to  be  done.”  This 
Joes  not  in  any  manner  convey  that 
he  CIO  is  not  supposed  to  actively 
contribute  to  the  creation  and  im- 
ilementation  of  company  strategy, 
IS  suggested  by  Michael  Hugos 
QuickLink  44587]  and  Paul  Glen 
^QuickLink  44559]  in  Readers’  Let- 
:ers  of  March  1.  Developing  the  right 
solution  means  being  involved  in 
working  intimately  with  business 
sxecutives.  It  does  not  mean  decid- 
ng  what  to  implement.  That  is  a  de¬ 
cision  for  the  business  side. 

In  a  survey  of  78  participants 
conducted  during  a  two-day  project 
management  boot  camp  at  Comdex 
2003, 49%  said  that  their  organi¬ 
zation’s  strategy  wasn’t  well  de¬ 
fined  or  broadly  communicated, 
50%  said  that  their  projects 
weren’t  aligned  with  the  organiza¬ 
tion’s  strategy,  and  57%  said  that 
the  value  of  their  projects  to  the 
business  wasn’t  well  defined.  Why 
do  CIOs  continue  to  put  resources 


into  these  projects?  I  certainly  hope 
it’s  not  in  the  name  of  alignment 
and  involvement  with  the  business 
community.  To  our  client  CIOs,  we 
have  always  advised  practicing  “in¬ 
telligent  disobedience,”  an  action 
that’s  designed  to  keep  both  the 
CIO  and,  more  importantly,  the  cor¬ 
poration  out  of  harm’s  way.  And 
we  remind  our  business  executive 
clients  of  the  time-tested  warning 
by  Warren  Buffett:  “Never  ask  the 
barber  if  you  need  a  haircut.” 

Gopal  K.  Kapur 
President,  Center  for  Project 
Management,  San  Ramon, 
Calif 

Evolving  Linux 

The  comments  in  the  article 
“Users  Wary  About  Open- 
Source  Alternatives  to  Windows 
OS”  [QuickLink  45042]  are  all  valid, 
but  if  the  day  ever  comes  when  ro¬ 
bust,  low-cost  ERP  solutions  arrive 
on  Linux,  then  the  competition  will 
begin.  That’s  what  small  businesses 
build  their  computer  networks 
around,  and  the  rest  just  follows, 
regardless  of  end-user  complaining. 


Microsoft  conquered  small  busi¬ 
ness  with  turnkey  SQL  Server- 
based  ERP  products  developed  by 
third-party  partners  such  as  Great 
Plains.  Ironically,  this  was  a  playing 
field  created  and  then  lost  by 
Novell.  As  long  as  Linux  builds  in 
enough  point-and-click  administra¬ 
tion  functionality  to  support  the 
do-it-yourselfers,  then  the  support 
issues  aren’t  any  greater  than  they 
were  with  Windows  just  a  few  short 
years  ago. 

Bill  Pratt 

Vice  president  of  operations, 
Kinamed  Inc.,  Camarillo,  Calif. 

Stopping  Spam 

The  first  item  in  the  “Seven 
Steps  to  Take  Now”  box  [Quick¬ 
Link  44797]  accompanying  the 
“Winning  Ways  to  Stop  Spam”  fea¬ 
ture  in  the  March  1  issue  (which 
says  to  use  a  GIF  image  file  instead 
of  publishing  e-mail  addresses  on 
the  Web)  can  cause  problems  for 
users  who  have  an  inability  to  view 
images,  especially  those  who  use 
speech  synthesis  tools  to  read  Web 
pages.  And  harvesters  tend  to  look 
not  only  at  the  viewable  content  of  a 
Web  page  but  also  at  the  embedded 


items,  particularly  mailto;  links.  A  dif¬ 
ferent  solution  that  seems  to  work 
for  many  companies  is  Web-based 
input  forms  that  don’t  use  e-mail 
facilities.  The  user  doesn’t  get  your 
e-mail  address  until  he  applies. 

Step  4  (use  ISPs  that  have  zero 
tolerance  for  spammers)  should 
also  mention  a  contract  escape 
clause,  because  even  spam-sup¬ 
porting  ISPs  have  policies  against 
spammers.  If  they  don’t  enforce 
their  zero-tolerance  policies,  then 
they  are  spam  supporters  and  don’t 
deserve  your  money. 

Larry  Williams 

Information  security  adminis¬ 
trator,  Portland,  Ore. 

COMPUTERWORLD  welcomes 
comments  from  its  readers.  Letters 
will  be  edited  for  brevity  and  clarity. 
They  should  be  addressed  to  Jamie 
Eckle,  letters  editor,  Computerworld, 
PO  Box  9171, 500  Old  Connecticut 
Path,  Framingham,  Mass.  01701. 
Fax:(508)879-4843. 

E-mail:  letters@computerworld.com. 
Include  an  address  and  phone  num¬ 
ber  for  immediate  verification. 

OFor  more  letters  on  these  and 
other  topics,  go  to 

www.computerworld.com/letters 


Thornton  A.  May  is  a 

longtime  industry  ob¬ 
server,  management 
consultant  and  com¬ 
mentator.  Contact  him 
at  thomtonamay@aol.com. 


"We  have  a  motto  that  says  IT  will  not 
stand  in  the  way  of  what  the  business 
needs  to  do."  —  Robert  Otto 
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Robert  Otto 
CIO  and  CTO 

The  United  States  Postal  Service, 

Washington,  D.C. 

Robert  Otto  started  his  professional  career 
as  a  clerk.  Today  he  is  the  CIO  and  CTO  of  the 
United  States  Postal  Service®,  which  processes 
about  55  percent  of  the  world's  daily  mail 
volume.  Tasked  with  reengineering  the  USPS's 
technology  infrastructure,  he's  led  an  effort  to 
consolidate  and  centralize  disparate  systems, 
standardize  tools  and  vendors,  upgrade  the 
network,  and  embrace  the  Web  and  wireless 
technology. 

Otto  and  his  team  have  built  an  advanced 
computing  environment  that  has  saved  the 
USPS®  some  $50  million  annually.  More  than 
30  Web-enabled  self-service  applications  help 
employees  manage  items  such  as  health 
benefits  and  life  insurance,  as  well  as  training 
on  demand. 

Last  year,  more  than  176  million  consumers 
used  the  usps.com  website.  The  USPS  also  intro¬ 
duced  a  hugely  popular  desktop  service  called 
Click-N-Ship®,  which  allows  mailers  to  create 
their  own  shipping  labels. 

Great  Moment  at  Work:  "Seeing  the 
positive  impact  this  project  has  had  on  the 
employees  and  customers  of  the  USPS." 

Microsoft  Office  System  salutes  those  who 
have  done  great  work  in  the  IT  field. 


Great  Moments  at  Work. 

Success  Stories  of  an  IT  Hero 
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FUTURE  WATCH 

SANs  Come  Up  to  Speed 

Innovation  for  Hire 

Chameleon  Computing 

Two  new  high-speed  Fibre  Channel 

Satyam  Cherukuri,  CEO  of  Sarnoff 

Reconfigurable  computing  architectures  are 

standards  could  provide  a  migra- 

Corp.,  discusses  the  meaning  of  inno- 

finally  beginning  to  emerge  as  mobile  appli- 

tion  path  as  SANs  ascend  to 

vation  and  how  his  company  has 

cations  begin  testing  traditional  micro- 

lOGbit/sec.  speeds.  Page  30 

turned  it  into  a  methodology.  Page  32 

processor  capabilities.  Page  34 

FOR  CODE  AUTOMATION 


Lee  Carter,  a  project  director  at  the 
Wisconsin  Workforce  Development 
Department,  says  it’s  helpful  that  busi¬ 
ness  users  and  IT  staffers  can  now 
speak  the  same  language  when  they 
work  on  requirements.  “It  allows  us  to 
really  focus  on  our  business  needs  and 
not  have  to  think  about  all  the  underly¬ 
ing  technology  until  it’s  time  to  think 
about  the  technology,”  he  says. 

To  map  out  requirements,  develop¬ 
ers  and  business  analysts  use  stick  fig¬ 
ures  and  lines  to  illustrate  the  various 
use-case  scenarios,  such  as  how  an  in¬ 
complete  application  is  processed  or 
how  a  rejected  applicant’s  appeal  is 
handled.  They  replace  the  stick  figures 
with  boxes  to  show  how  the  computer 
systems  are  connected.  Once  a  series 
of  activity,  sequence,  collaboration  and 
other  diagrams  to  design  and  document 
the  new  applications  is  ready,  a  tool 
transforms  the  models  into  the  bulk  of 
the  application  code.  Carter  says. 

He  says  the  diagrams  documenting 
the  applications  can  be  retrieved  at  any 
time,  even  years  down  the  road,  be¬ 
cause  they’re  captured  electronically 
with  standards-based  tools  from  IBM’s 
Rational  Software  division.  “Diagrams 
make  so  much  more  sense  than  writing 
pages  and  pages  of  narrative  that  just 
get  stuffed  into  a  3-inch  binder  that 
nobody  ever  looks  at  again,”  he  says. 
“We  can  trace  from  business  require¬ 
ments  to  code,  or  code  back  to  busi¬ 
ness  requirements.” 

Continued  on  page  28 


WISCONSIN  is  replacing  its 
collection  of  disparate 
mainframe-  and  client/ 
server-based  unemploy¬ 
ment  insurance  benefits 
applications  with  a  Web  system.  But 
instead  of  starting  the  project  by  writ¬ 
ing  pages  of  specifications  to  describe 
the  business  processes,  the  team 
drew  pictures. 

The  state’s  Department  of  Workforce 
Development  hired  a  trainer  to  teach 
its  Cobol  programmers  and  business 
users  the  Unified  Modeling  Language, 
and  the  team  mapped  out  UML  dia¬ 
grams  on  computers  to  document  the 
requirements  for  the  new  applications. 

Wisconsin  is  part  of  a  small  but 
committed  group  of  organizations  that 
is  turning  to  a  set  of  standards  collec¬ 
tively  known  as  Model  Driven  Archi¬ 
tecture  (MDA)  that’s  being  developed 
by  Needham,  Mass.-based  Object  Man¬ 
agement  Group  Inc.  They  use  UML 
and  code-generating  tools  to  build  ap¬ 
plications,  and  if  all  goes  well,  they  use 
programming  languages  only  sparingly 
to  fill  in  the  business  logic.  OMG  CEO 
Richard  Soley  says  he  knows  of  two 
companies  that  are  generating  100%  of 
their  code  through  the  MDA  approach. 

But  automatic  code  generation  is 
only  one  of  the  benefits  that  early 
adopters  are  finding.  They  say  they’re 
also  reducing  development  time  and 
costs,  improving  code  quality,  promot¬ 
ing  code  reuse  and  doing  a  better  job 
of  meeting  application  requirements. 


Early  adopters  of 
Model  Driven  Archi¬ 
tecture  face  cultural 
barriers,  but  the  pay¬ 
off  promises  to  be 
savings  in  time  and 
money  as  well  as  im¬ 
proved  code  quality. 
By  Carol  Sliwa 
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With  the  easiest  way  to  go  from  wired  to  wireless  networks, 
exploring  new  territory  can  be  a  walk  in  the  park. 

Wherever  you  want  to  work,  the  sky  is  the  limit  when  you  have  IBM  ThinkPad* 
notebooks  with  Access  Connections  software  and  wireless  Intel®  Centrino™  mobile 
technology  (on  select  models).  Now  it’s  easier  than  ever  to  switch  between  wired  and 
wireless  networks  —  whether  you’re  at  an  airport,  the  office,  an  Internet  cafe,  even 
your  kitchen.®  So  consider  the  IBM  ThinkPad  wireless  notebook,  and  experience  a 
whole  new  level  of  wireless  possibilities,  think  fr©0ClOm 

1  866  426-8176  I  ibm.com/shop/m133 

Save  on  shipping.  Order  online? 
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Continued  from  page  25 

To  ease  the  transition  to  MDA,  the 
project  team  brought  in  a  qualified  ser¬ 
vice  provider,  St.  Paul,  Minn.-based 
Adaptive  Team  Collaboration  Inc., 
from  the  OMG’s  MDA  FastStart  pro¬ 
gram.  Chris  Armstrong,  chief  technol¬ 
ogy  officer  at  ATC,  has  alternately 
served  as  mentor,  trainer,  counselor, 
psychiatrist  and,  most  recently, 
process  auditor,  Carter  says. 

Another  critical  decision  was  select¬ 
ing  Dublin-based  Curam  Software’s 
J2EE-based  framework  for  building  ap¬ 
plications  specific  to  the  government 
social-services  sector.  The  business  re¬ 
quirements  that  the  Wisconsin  team 
specified  through  UML  and  defined 
through  a  platform-independent  model 
(PIM)  effectively  integrate  into  the  Cu¬ 
ram  software.  Carter  says.  Systems  in¬ 
tegrator  Tier  Technologies  Inc.  also 
helped  with  the  work. 

Carter  says  that  so  far,  the  project  is 
exceeding  expectations.  The  team  com¬ 
pleted  project  requirements  60  days 
ahead  of  schedule.  The  first  production 
release  of  the  application  is  due  in  No¬ 
vember,  with  other  pieces  to  follow 
during  the  next  two  years.  That’s  a 
shorter  time  frame  than  for  similar 
projects  states  are  undertaking  using 
traditional  approaches.  Carter  says. 

PFPC  Inc.  in  Wilmington,  Del.,  a 
provider  of  IT  outsourcing  services  and 
applications  for  the  investment  man¬ 
agement  industry,  says  customer  proj¬ 
ects  that  previously  took  six  months  to 
complete  are  taking  four  using  MDA. 

Michael  Harte,  the  company’s  CIO, 
says  the  MDA  approach  is  instilling 
discipline  in  his  staff,  leading  to  greater 


accuracy.  Because  the 
process  forces  more 
work  to  be  produced  up¬ 
front,  serious  design 
flaws  can  be  discovered 
earlier  than  they  could  in 
the  past. 

Ian  Maung,  a  senior 
architect  at  PFPC,  notes 
that  the  MDA  approach 
helps  developers  who 
work  in  different  geo¬ 
graphic  locations  to 
communicate  better  be¬ 
cause  they’re  able  to  un¬ 
derstand  the  interfaces 
their  colleagues  expect. 

Maung  says  that  in  the 
future,  MDA  might  en¬ 
able  easier  switches  be¬ 
tween  runtime  plat¬ 
forms,  since  the  business 
and  application  logic  is 
defined  independently 
of  the  platform,  and  the 
PIM  could  simply  be  re¬ 
vised  to  generate  a  new 
platform-specific  model.  He  hopes  ac¬ 
tion  semantics  in  UML  2.0  might  pave 
the  way  for  100%  code  generation  to 
standards-based  platforms  such  as 
J2EE,  and  MDA  ultimately  may  enable 
customized  code  generation. 

Although  the  UML/MDA  approach 
is  gaining  increasingly  wider  adoption 
by  application  architects,  UML  usage 
includes  no  more  than  15%  of  develop¬ 
ers,  according  to  several  analysts’  esti¬ 
mates.  Critics  say  its  complexity  can 
be  daunting,  and  the  cultural  change 
for  IT  shops  accustomed  to  pounding 
out  code  can  be  difficult  to  negotiate. 


Analyst  Carl  Zetie  at 
Forrester  Research  Inc. 
says  few  development 
teams  have  the  patience 
to  go  deep  into  a  project 
and  not  have  a  line  of 
code  to  show  for  it. 
“With  conventional  IT 
shops,  there’s  always  the 
urge  to  code,  and  that  to 
me  is  the  single  biggest 
barrier  to  any  kind  of 
modeling,”  he  says. 

Thomas  Murphy,  an 
analyst  at  Meta  Group 
Inc.,  says  many  develop¬ 
ers  are  skeptical  based 
on  past  experiences  with 
4GL  tools  that  produced 
code  that  was  hard  to 
maintain.  He  predicts 
that  the  use  of  model- 
driven  and  declarative 
approaches  to  develop¬ 
ment  will  increase  —  but 
not  necessarily  with  the 
UML/MDA  approach, 
which  faces  many  challenges. 

Early  adopters  are  aware  of  many  of 
them.  For  example,  Maung  says  tools 
that  claim  to  fully  support  standards 
often  don’t.  And  Per  Gyllstrom,  chief 
architect  at  PFPC,  notes  that  some  de¬ 
velopers  fear  they  may  be  displaced  if 
an  entire  application  can  be  generated 
through  models  and  tools.  It’s  impor¬ 
tant,  he  says,  to  start  with  small  projects 
to  convince  skeptics  of  MDA’s  merits. 

Although  one  of  the  benefits  of 
MDA  is  code  reuse,  developers  can  be 
reluctant  to  trust  a  colleague’s  code  or 
code  that  has  been  generated  by  a  tool. 


Fireman’s  Fund  Insurance  Co.  in  No¬ 
vato,  Calif,  encountered  such  resistance 
while  undertaking  a  major  project  to 
overhaul  its  claims  system,  which  went 
into  production  in  2000.  A  seven-person 
team  skilled  in  object-oriented  develop¬ 
ment  used  a  set  of  UML  class  models 
from  IBM  called  the  Insurance  Applica¬ 
tion  Architecture  (lAA)  to  generate 
code  into  an  Enterprise  JavaBeans- 
based  framework  for  persistence,  mes¬ 
saging,  events  and  object  distribution. 

Rational  Rose  scripts  produced  over 
80%  of  the  architectural  code,  and 
Fireman’s  Fund  later  switched  to  a 
code-generation  tool  from  Montreal- 
based  Codagen  Technologies  Corp. 
Within  weeks,  Codagen’s  rules  engine 
and  reusable  templates  eliminated  the 
need  for  Rose  scripts  to  do  the  trans¬ 
formation  from  model  to  code. 

But  the  effort  stalled  as  priorities 
shifted,  and  tension  mounted  between 
the  core  architecture  team  and  the  de¬ 
velopers  who  had  to  hand-code  the 
business  logic,  says  Bill  Nadal,  an  en¬ 
terprise  architect  at  Fireman’s  Fund. 

The  enterprise  architecture  team 
picked  up  the  torch  again  in  2002,  when 
it  designed  a  blueprint  for  a  reusable 
component  stack  with  the  aid  of  Peter 
Herzum,  an  expert  in  component- 
oriented  software  manufacturing.  The 
team’s  goal  was  a  “software  factory”  ap¬ 
proach  to  development,  in  which  com¬ 
ponents  would  be  reused  and  snapped 
together  like  Legos  to  build  applications. 

A  proof  of  concept  done  with  Her¬ 
zum  Software  LLC  and  Codagen  target¬ 
ed  IBM’s  MQSeries  Financial  Edition, 
which  used  the  LAA  class  models  and 
Rose  scripts  to  generate  services  and 
XML-based  messages,  Nadal  says.  The 
team  demonstrated  that,  using  the 
MDA  approach,  code  could  be  automat¬ 
ically  generated  for  persistence  classes, 
service  interfaces  and  XML  messages. 

Enterprise  architects  at  Fireman’s 
Fund  are  currently  using  their  compo¬ 
nent  blueprints  to  build  core  founda¬ 
tion  models  and  services  for  security, 
context  management  and  metadata 
management.  In  the  future,  they  plan 
to  focus  on  business-level  components. 

“Everyone  thinks  an  enterprisewide 
approach  takes  longer  and  is  more  ex¬ 
pensive,”  says  Nadal.  “It  actually  means 
you  may  build  a  higher-quality  compo¬ 
nent  once  instead  of  many  times  across 
individual  projects.  MDA  is  an  important 
step  in  achieving  that  goal.”  O  45278 


UML  2.0  ON  THE  WAY 

Two  IBM  technologists  involved  with  developing  the 
standard  discuss  its  future; 
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A  Different  Model  for  MICROSOFT 


One  prominent  tools  vendor  that  has  no 
plans  to  build  tools  to  support  UML  and 
MDA  is  Microsoft  Corp. 

Prashant  Sridharan,  a  lead  product 
manager  in  Microsoft’s  tools  group,  says 
the  company  is  fully  behind  the  generic 
idea  of  model-driven  development.  But 
Microsoft  believes  there’s  a  need  for  mod¬ 
els  closely  tied  to  the  operating  system. 

Sridharan  says  the  UML/MDA  camp 
promotes  the  notion  “that  you  can  model 
once  and  write  your  code  on  a  number  of 
platforms,"  but  that’s  not  effective  in  prac¬ 
tice.  Microsoft  is,  therefore,  working  on  a 
modeling  engine  and  modeling  framework 
to  allow  users  to  describe  service-orient¬ 
ed  applications  in  a  Windows-centric  en¬ 
vironment.  He  says  he  expects  partners  to 
;k r-  UML  tools  on  top  of  it. 

■ .  nitehorse,  the  code  name  for  the  ser¬ 


vice-oriented  design  tool,  is  due  in  the  first  half 
of  2005,  with  Microsoft’s  Visual  Studio  2005 
development  environment. 

One  of  the  key  elements  of  Whitehorse  is  an 
XML-based  domain-specific  language  to  de¬ 
scribe  services  or  pieces  of  a  network  infra¬ 
structure  and  how  they  connect.  Microsoft 
plans  to  publish  a  software  development  kit  for 
large  companies  that  want  to  build  DSLs. 

“The  value  is  there  only  if  you’re  going  to  see 
a  massive  amount  of  productivity  out  of  it,  be¬ 
cause  it  is  a  massive  amount  of  effort  to  do  it,” 
Sridharan  cautions. 

Three  designers  that  Microsoft  plans  to  ship 
with  Whitehorse  will  help  users  to  create  dia¬ 
grams  based  on  the  DSLs.  A  logical  infrastruc¬ 
ture  designer  allows  a  user  to  visually  depict, 
with  boxes  and  lines,  what  each  piece  of  hard¬ 
ware  in  a  network  can  do.  A  service-oriented 
application  designer  can  be  used  to  describe 


Web  services  and  the  protocols  to  connect 
them.  A  class  designer  is  for  describing 
classes  or  interfaces  and  the  inheritance 
relationships  among  them. 

Using  Whitehorse,  an  architect  who  de¬ 
signs  a  service-oriented  application  will  be 
able  to  validate  whether  the  application  will 
work  in  the  network  topology  that’s  de¬ 
scribed,  Sridharan  says. 

And  the  action  of  dragging  and  dropping  a 
service  onto  the  service-oriented  designer 
doesn’t  merely  create  a  model,  it  also  gener¬ 
ates  code,  because  the  service-oriented  de¬ 
signer  is  in  sync  with  the  class  designer  and 
the  underlying  code.  Sridharan  says  users 
shouldn’t  expect  100%  code  generation, 
since  they  will  still  need  to  write  business 
logic,  but  they  will  see  progressively  more 
code  generation  overtime. 

-  Carol  Sliwa 


Building  an 
Application 
Using  MDA 

User  develops  a  plat- 
form-independent 
model  to  represent  de¬ 
sired  business  function¬ 
ality  and  behavior  -  but 
not  technology  details. 

An  MDA-compliant 
tool  applies  stan¬ 
dard  mapping  to  gener¬ 
ate  a  platform-specific 
model,  for  middleware 
based  on  J2EE  or 
XML/SOAP,  from  PIM. 

MDA  tool  generates 
all  or  most  of  imple¬ 
mentation  code  for  de¬ 
ployment  technology. 


A  NETWORK  OUTAGE  THREATENS 
TO  SHUT  DOWN  GLOBAL  DISTRIBUTION 


HAS  2  HOURS  TO  FIND 
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CAN  YOUR  SOFTWARE  KEEP  BUSINESS  FROM  DISAPPEARING? 


And  protect  the  delivery  of  vital  business  services 
like  sales,  customer  service,  online  transactions, 
logistics  and  distribution — whatever  is  most 
critical  to  your  company's  success.  It's  enterprise 
management  software  that  works  with  your  existing 
IT  resources  to  let  you  manage  what  matters  from 
a  business  perspective  and  execute  with  precision. 
Find  out  how  at  www.bmc.com/bsm51 


Business  Service  Management  solutions  from 
BMC  Software*  can.  In  fact,  they  let  you  predict 
critical  performance  problems  and  resolve  them 
before  they  ever  impact  your  business.  And  you 
can  prioritize  IT  management,  investments  and 
resource  allocations  to  optimize  your  business 
performance.  So  you  can  solidly  align  your  IT 
investments  with  strategic  business  goals. 
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OUTLOOK:  Cost  and  backward-compatibility  issues 
could  delay  acceptance  of  10Gbit  Fibre  Channel  in 
favor  of  two  interim  standards.  BY  LUCAS  MEARIAN 


STORAGE  networking 
equipment  vendors 
are  preparing  a  slew 
of  new  Fibre  Chan¬ 
nel  switches  and  host  bus 
adapters  that  can  effectively 
double  the  speed  of  current 
storage-area  networks  (SAN) 
to  4Gbit/sec.  Products  based 
on  the  4Gbit  standard,  first 
advocated  by  chip  makers  last 
year  and  approved  by  the  Fi¬ 
bre  Channel  Industry  Associa¬ 
tion  (FCIA)  and  the  American 
National  Standards  Institute 
last  June,  are  slated 
to  roll  out  this  year. 

The  technology 
could  serve  as  an 
interim  migration 
step  to  products  based  on  the 
lOGbit/sec.  Fibre  Channel 
specification  approved  by  the 
FCIA  last  November. 

But  not  all  users  are  con¬ 
vinced  that  more  speed  is 
better,  especially  where  appli¬ 
cation  servers  are  the  bottle¬ 
neck.  “On  the  fabric  side,  it’s 
screaming  . . .  but  you’d  satu¬ 
rate  your  [server]  bus  long  be¬ 
fore  you’d  saturate  a  1Gbit  or 
2Gbit  Fibre  Channel  connec¬ 
tion,”  says  Gary  Pilafas,  senior 
storage  and  systems  architect 


at  UAL  Loyalty  Services  Inc., 
an  Arlington  Heights,  Ill.-based 
unit  of  United  Air  Lines  Inc. 

Mike  Bennett,  a  senior  net¬ 
work  engineer  at  Lawrence 
Berkeley  National  Laboratory 
in  Berkeley,  Calif,  believes 
that  new  servers  being  of¬ 
fered  with  64-bit  processors 
and  faster  internal  bus  de¬ 
signs  will  require  more  than 
the  additional  bandwidth  be¬ 
ing  offered  by  4Gbit  Fibre 
Channel  switches,  RAID  con¬ 
trollers  and  host  bus  adapters 
for  SANs. 

“Two  years  out, 
is  there  going  to 
be  a  market  for  it? 
I’d  say  no  doubt. 
It’s  like  garage  space:  If  you 
have  it,  you’ll  fill  it,”  Bennett 
says. 

By  that  time,  however,  4Gbit 
products  will  face  competition 
from  devices  based  on  a  faster 
10Gbit  standard.  In  fact,  as 
vendors  begin  volume  ship¬ 
ments  of  4Gbit  products  this 
summer,  they’ll  be  introducing 
early  10Gbit  products  as  well. 

Bennett  says  10Gbit  Ether¬ 
net  will  challenge  Fibre  Chan¬ 
nel  as  an  alternative  storage 
interconnect  if  Fibre  Channel 


Hit’s  like  garage 
space:  If  you 
have  it,  you’ll  fill  it. 

MIKE  BENNETT.  SENIOR  NETWORK 
ENGINEER,  LAWRENCE  BERKELEY 
NATIONAL  LABORATORY 


doesn’t  keep  up,  so  a  leap  to 
10Gbit  is  a  must.  But  4Gbit  de¬ 
vices  offer  critical  advantages: 
Analysts  and  vendors  say  the 
lOGbit/sec.  devices  won’t  be 
backward  compatible  with 
current  1Gbit  or  2Gbit  prod¬ 
ucts.  And  they’re  expected  to 
cost  about  $5,000  per  port  — 
five  times  as  much  as  current 
2Gbit  devices. 

In  contrast,  the  upcoming 
4Gbit  devices  are  expected  to 
cost  about  $1,000  per  port,  the 
same  as  their  2Gbit  cousins. 

As  a  result,  analyst  Rick 
Villars  at  market  research 
company  IDC  in  Framingham, 
Mass.,  is  bullish  on  the  stan¬ 
dard’s  prospects.  He  predicts 
that  4Gbit  products  will  hit 
the  market  in  the  third  quar¬ 
ter  but  account  for  just  10% 
of  the  market  within  the  first 
12  months.  After  two  years, 
however,  he  expects  that 
number  to  leap  to  90%  as 
competitively  priced  4Gbit 
products  replace  slower 
offerings. 

“They’re  going  to  be  the 
best  technology  at  the  lowest 
price,”  Villars  says. 

Meanwhile,  high  prices  and 
backward-compatibility  con¬ 
cerns  will  limit  the  appeal  of 
next-generation  10Gbit  de¬ 


vices.  “You  have  to  replace 
anything  that  the  10Gbit  tech¬ 
nology  touches  with  all-new 
10Gbit  equipment,”  says 
Villars. 

The  Third  Option 

Aware  of  these  limitations, 
vendors  came  forward  with 
the  interim  4Gbit  standard. 
And  hedging  their  bets  yet 
again,  SAN  equipment  ven¬ 
dors  have  another  interim 
Fibre  Channel  standard  in  the 
offing.  Disk  drive  manufac¬ 
turers  are  rallying  around  a 
newly  proposed  8Gbit  speci¬ 
fication,  and  SAN  managers 
could  see  products  within 
three  years,  according  to 
manufacturers. 

Skip  Jones,  chairman  of  the 
FCLA’s  Speed  Forum,  says  the 
organization  held  its  first 
meeting  on  8Gbit  Fibre  Chan¬ 
nel  last  month.  “If  we  get  out 
there  three  years,  and  you’re 
still  paying  a  huge  premium 
for  10Gbit  technology  and  you 
want  that  backward  compati¬ 
bility,  that’s  where  8Gbit  will 
be  attractive,”  he  says. 

For  now,  the  focus  is  on 
4Gbit  products.  Several  ven¬ 
dors,  including  San  Jose-based 
Hitachi  Global  Storage  Tech¬ 
nologies  Inc.,  the  disk  manu¬ 
facturing  arm  of  Hitachi  Data 
Systems  Inc.  (HDS),  have  an¬ 
nounced  4Gbit  Fibre  Channel 
offerings  (see  box  at  right). 

So  where  does  that  leave 
10Gbit  Fibre  Channel?  Despite 
the  cost  and  compatibility  is¬ 
sues,  vendors  see  a  place  for 
the  developing  standard  in 
high-end  SANs.  Hubert  Yoshi- 
da,  chief  technology  officer  at 
HDS,  says  10Gbit  products 
will  serve  as  an  interswitch 
link  that  can  cobble  together 
many  switches  in  a  SAN  fabric 
while  using  fewer  ports.  He 
also  sees  it  as  a  way  to  create 
many  virtual  ports  over  one 
physical  switch  port.  “Through 
the  same  physical  port,  we 
can  allow  up  to  128  different 
users,”  he  says. 

Arun  Taneja,  an  analyst  at 
The  Taneja  Group  in  Hopkin- 
ton.  Mass.,  predicts  that  the 
demand  for  10Gbit  Fibre 
Channel  will  be  enormous, 
both  for  connecting  internal 
disk  drives  to  RAID  con¬ 
trollers  and  for  interswitch 


Fibre  Channel  Evolution 

v-w  ... 

FIBRE  CHANNa  '^  PRODUCT  BACKWARD  COST  PER 
TECHNOLOGY  .  AVAIUBILITY  COMPATIBLE  PORT 


2GbK/sec 

Now 

Yes 

$1,000 

46biVsec. 

2004 

Yes 

31,000 

1  8Gbit/soc. 

2007 

Yes 

Undetermined 

;  lOGbR/sec.  j  2004 

No 

$5,000 

EMER6IN6f^ 

TECHNOLOGIES 


The 

4Gbit 

Players 

Although  some  vendors  are 
preparing  4Gbit  Fibre  Chan¬ 
nel  devices  for  release  as  ear¬ 
ly  as  this  summer,  others  are 
more  cautious.  » 

Hitachi  Data  Systems  has 

begun  joint  testing  of  new 
46bit/sec.  hard  drives  with 
resellers  and  expects  those 
devices  to  be  available  by 
summer. 


Emulex  Corp.  in  Costa  Mesa. 
Calif.,  has  announced  its  em¬ 
bedded  46bit  storage  switch¬ 
ing  technology  and  has  plans 
for  a  host  bus  adapter  this 
year  andalOGbitHBAin 
2005. 


QLogic  Corp.  in  Aliso  Viejo. 
Calif.,  currently  offers  a 
switch  that  has  two  10Gbit 
ports  for  interconnections 
between  switches.  By  mid¬ 
year,  it  plans  to  ship  4Gbit 
NBAs  and  switches  that  sup¬ 
port  4Gbit/sec.  and  10Gbit/ 
sec.  speeds. 

Cisco  Systems  Inc.  hasn't 
yet  committed  to  producing 
4Gbit  products,  but  it  has 
announced  support  for  the 
10Gbit  standard.  It  plans  to 
make  a  10Gbit  module  avail¬ 
able  on  its  MDS  9000  SAN 
switches  sometime  this  year. 

Brocade  Communications 
Systems  Inc.  in  San  Jose 
doesn’t  plan  to  begin  testing 
4Gbit  and  10Gbit  switches 
with  storage  device  manufac¬ 
turers  until  2005. 


links  in  corporate  SANs. 

“There’s  no  large  enterprise 
I  know  of  in  the  Fortune  300 
or  400  range  that  doesn’t  have 
a  massive  number  of  Fibre 
Channel  switches  at  this  point 
in  time.  As  they  replace  those 
switches  or  directors  with 
4Gbit  Fibre  Channel  ports, 
there’s  no  question  they’ll 
need  multiple  10Gbit  ports 
to  balance  that  out,”  Taneja 
says.  O  45220 


Compuware 


THE  POWER  TO  Develop,  Transform,  Reuse 


Put  your  J2EE™  application  development  into  overdrive — with  unmatched  quality  and 
unprecedented  flexibility — using  Compuware  OptimalJ.  Increase  developer  productivity  up 
to  9096.  Seamlessly  instill  quality  into  development.  Forge  existing  infrastructures  and  new 
technologies  into  an  integrated  whole. 

Realize  business  agility  with  applications 
that  are  truly  reusable,  time  and  time  again. 


The  leader  in  IT  value. 


COMPUWARE 

www.compuware.com 


The-  'thing  magical  about  real  innovation,  according 
to  Satyam  Cherukuri,  CEO  of  Samoff  Corp.  His  compa¬ 
ny,  which  grew  out  of  the  former  RCA  Laboratories  in 
Princeton,  N.f,  aims  to  help  its  customers  create  prod¬ 
ucts  and  services  that  will  disrupt  the  marketplace 
with  breakthrough  technologies  or  breakthrough  pric¬ 
ing.  Cherukuri  discussed  the  difference  between  new 
ideas  and  innovation,  the  methodology  of  innovation 
and  why  hot  technologies  are  not  the  source  of  most 
innovation  in  the  marketplace  with  Computerworld’s 
Tommy  Peterson. 

You  speak  of  innovation  as  a  competency  you  bring  to  your 
customer  companies.  Can  you  explain?  There  are  broadly 
two  types  of  innovation.  Let’s  get  our  definitions 
straight  —  the  phrase  is  used  in  so  many  different 
contexts.  Businesses  innovate  and  reconstitute  them¬ 
selves  by  changing  their  business  models.  The 
biggest  story  in  the  past  10  years  in  that  direction 
was  IBM.  There  is  another  aspect,  which  is  innova¬ 
tion  through  introducing  new  products. 

Our  focus  at  Sarnoff  and  our  core  competency  is 
really  the  creation  of  and  introducing  new  product 
lines  into  the  market.  That’s  the  context  of  innova¬ 
tion  I’m  talking  about.  Innovation  in  that  context  has 
often  been  associated  with  entrepreneurs  who  either 
through  their  brilliance  or  serendipity  create  new 
ideas,  new  gizmos,  new  things,  and  that’s  had,  in  fact, 
a  significant  effect  on  the  marketplace.  That’s  the  tra¬ 
ditional  approach  to  innovation,  which  is  driven  by 
the  venture-capital  models  funding  entrepreneurs  — 
all  of  that  feeding  into  an  ecosystem. 

Innovation  at  Sarnoff  is  really  a  methodology.  We 
take  the  artistic  or  the  “black-magic”  aspect  out  of 
that  process,  rationalize  it  and  develop  methodolo¬ 
gies  around  it.  It’s  not  unusual  for  the  instincts  of  the 
individual  to  drive  any  particular  domain  in  the  early 
stages  of  development  where  all  of  the  forces  or  fac¬ 
tors  are  not  understood.  As  you  understand  different 
phenomena  that  contribute  to  successes  or  failures, 
then  you  can  develop  a  methodology  around  it, 
which  is  what  Sarnoff  has  done  in  the  past  15  years. 

Is  the  key  to  that  understanding  and  innovation  being  able  to 
break  it  down  into  steps?  Yes.  But  I  want  to  separate  out 
continual  evolution  of  the  product  line  from  introduc¬ 
tion  of  product  lines  that  create  a  disruption  in  the 
market  either  through  performance  or  cost  or  both. 

It’s  different  from  a  Chevy  owner  getting  the  next 
model  each  year  or  an  RCA  or  Toshiba  introducing 
the  next  DVD  every  year.  Going  from  VCR  to  DVD 
was  innovation.  Evolving  the  DVD  product  line  on  a 
six-month  basis  is  what  I  call  operating  evolution. 

It’s  not  the  idea  we’re  talking  about;  it’s  not  the  re¬ 
search  we’re  talking  about  —  it’s  introducing  a  dis¬ 
ruptive  performance  or  cost  break  into  the  market 
that  causes  a  disruption  in  the  marketplace. 

There  are  three  factors  that  are  always  in  interplay, 
and  that’s  why  innovation  has  for  the  most  part  been 
a  black  art.  That  term  is  used  by  scientists  to  mean 
you  cannot  derive  it  from  equations;  it  is  something 
you  intuit.  When  you  understand  things,  it’s  not  mag¬ 
ic.  It’s  governable;  it’s  manageable. 

What  are  the  forces  that  need  to  be  understood?  Innova¬ 
tion  is  about  bringing  technology,  business  model 
and  capital  together.  Those  are  essential  ingredients, 


When  you’re  just  playing  with  technology,  you’re  too 
far  away  from  reconciling  with  the  market.  You  think 
you’re  succeeding,  but  in  no  context.  There’s  no  con¬ 
text  to  defme  what  success  means.  You’ve  got  to  sell 
a  product  in  the  market,  and  that’s  really  what  inno¬ 
vation  is  aU  about. 

Is  there  a  secret  to  successful  innovation?  The  key  to  in¬ 
novation  is  having  the  ability  to  change  the  business 
model  at  a  moment’s  notice.  And  the  doom  of  inno¬ 
vation  is  the  opposite  —  if  you’re  reluctant  to  change 
the  business  proposition,  you’re  very  likely  to  fail. 

We  are  always  engaged  in  development  projects  in 
large  corporations  and  in  government  institutions, 
and  my  personal  observation  is  that  the  single 
biggest  reason  for  their  failure  is  that  they’re  not 
willing  to  change  the  original  objective.  Because 
when  the  original  objective  becomes  irrelevant  — 

I’m  not  saying  it  must  become  irrelevant,  but  it  often 
becomes  irrelevant  —  the  initial  teams  lock  into 
them.  They’re  afraid  to  change  those  objectives  in  a 
timely  manner.  That  is  really  what  leads  to  running 
out  of  capital.  You  may  have  the  right  technology  and 
the  right  business  model  in  the  end,  but  you  didn’t 
change  them  soon  enough  before  you  either  ran  out 
of  capital  or  time.  Innovation  has  to  be  delivered  in  a 
timely  manner.  The  window  of  opportunity  and  the 
framework  of  investment  are  variables,  but  necessar¬ 
ily  finite  variables. 


Age:  47 


Accomplishments; 

Cherukuri  joined  Sarnoff 
as  a  researcher  in  1989, 

4  was  named  managing  di- 
rector  of  the  company’s 
;  7I I  Jffc  W  ?  life  sciences  and  systems 
rmit  in  1998,  and  became 
l>  ..  i-  Sarnoff’s  chief  operating 

officer  in  2001.  He  took  on  the  role  of  pres¬ 
ident  and  CEO  in  2002.  He  has  authored  or 
co-authored  more  than  12  technical  publi¬ 
cations  and  is  the  inventor  or  co-inventor 
listed  on  more  than  25  U.S.  patents. 


necessary  but  not  sufficient.  The  reason  the  venture- 
capital  model  is  optimized  for  an  80%  failure  rate  is 
what  the  VC  world  knows  from  experience.  Even  af¬ 
ter  they  have  identified  a  specific  business  proposi¬ 
tion,  because  there’s  a  technology  risk,  there’s  a  mar¬ 
ket  risk,  and  if  they’re  not  dealt  with  in  a  timely  fash¬ 
ion,  you  run  out  of  capital.  So  how  you  reconcile 
these  in  a  systematic  way  is  what  I’m 
talking  about  as  a  competency. 


MORE  ON  INNOVATION 


Are  you  saying  that  all  our  notions  of  innova¬ 
tion  as  coming  from  a  flash  of  inspiration  are 
wrong  and  that  it  really  comes  from  knowl¬ 
edge  and  analysis  of  the  process  in  the  past? 


For  more  of  the  Cherukuri  interview, 
visit  our  Web  site: 
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What  technologies  do  you  find  the  most  intriguing  right  now? 

I  hate  to  look  in  my  crystal  ball,  but  I  suppose  it’s  an 
amusing  exercise.  There  are  a  couple  of  institutions  — 
I  don’t  want  to  name  them  because  I  don’t  want  to  of¬ 
fend  them  —  that  put  out  the  top  10  technologies  every 
year.  I’ve  been  reading  them  for  the  last  30  years.  I 
never  see  them  make  sensible  projections  on  anything. 

I  could  talk  about  how  nanotechnology  is  going  to 
be  great,  but  what  I’m  saying  is  that  innovation  is  not 
that  simple.  In  the  innovation  game,  that  temptation 
needs  to  be  gotten  away  from.  You  need  to  be  cog¬ 
nizant  of  the  fact  that  at  any  given  time,  there  are  a 
lot  of  technology  forces  out  there,  but  never  lock  in 
on  which  one  is  going  to  be  the  next  hot  one.  Keep 
your  options  open  until  you  see  strong  evidence  of 
which  way  to  go.  Don’t  create  a  business  plan  with 
the  assumption  that  nanotechnology  is  going  to  be 
the  one,  because  that  rarely  works. 

There  is  always  a  continuing  expansion  of  science 
and  technology,  and  there  is  always  a  continuing 
expansion  of  engineering  capabilities.  From  the  be¬ 
ginning  of  mankind,  that  growth  has  always  been  ex¬ 
ponential.  But  innovation  is  not  about  science  or 
technology  or  engineering.  Innovation  is  about  rec¬ 
onciling  those  with  the  market  to  create  new  prod¬ 
ucts.  So  I  don’t  really  care  about  hot  technologies, 
because  business  opportunities  are  always  there  no 
matter  what  the  conditions  are,  and  we  help  our  cus¬ 
tomer  find  them.  On  the  other  hand,  if  you  have  a  hot 
technology  that  gives  you  a  substantial  competitive 
advantage,  go  for  it.  Sarnoff  has,  for 
example,  the  highest  power  laser  ever 
created.  It’s  still  far  away  from  an  in¬ 
novation  project,  but  if  we  have  the 
science  harnessed  into  innovation, 
hey,  that’s  going  to  make  us  a  lot  of 
money.  O  45297 
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IMAGINE  a  handheld 
device  that  combines 
the  functionality  of  a 
cell  phone,  a  PDA,  an 
-«*"  ■  MP3  player,  a  digital 

camera,  a  television  and  a  half-dozen 
other  devices. 

Whatever  the  merits  of  such  a  giz¬ 
mo,  for  the  moment  at  least,  building  it 
is  still  infeasible.  The  separate  micro¬ 
processor  logic  needed  for  each  func¬ 
tion  would  require  far  too  much  real 
estate  and  energy  to  fit  into  anything 
resembling  a  decent  handheld. 

Proponents  of  a  long-held  concept 
called  reconfigurable  computing  think 
they  may  have  an  answer  to  the  problem. 

Reconfigurable  computing  involves 
processor  hardware  capable  of  auto¬ 
matically  adapting  to  changing  appli¬ 
cation  needs.  Unlike  the  permanently 
etched  circuitry  on  current-generation 

static  microprocessors,  _ 

the  wiring  on  reconfig¬ 
urable  processors  can  be 
redrawn  on  the  fly  by 
software-  or  hardware- 
based  microcontrollers,  to 
match  the  function  being 
performed.  By  opening 
and  closing  the  millions 
of  logic  gates  on  such 
chips,  their  circuitry  can 
be  changed  so  as  to  perform  signal 
processing  one  instant,  for  example, 
and  an  encryption  function  the  next. 

Because  reconfigurable  computing 
chips  do  away  with  a  lot  of  the  redun¬ 
dancy  and  overhead  found  on  static 
processors,  they  also  consume  less  en¬ 
ergy  while  delivering  greater  speed. 

For  instance,  a  single  such  chip  in  a 
cellular  handset  could  configure  itself 
to  search  for  a  local  base  station,  then 
establish  its  identity  on  the  cell  and  fi¬ 
nally  send  or  receive  calls  —  tasks  that 
today  require  multiple  chips. 

“What  you  are  trying  to  do  is  to 
change  the  hardware  to  match  the  prob- 


:  DEFINITION 

Reconfigurable 

Computing 

Chips  or  systems  capable 
of  modifying  themselves, 
while  running,  to  meet  dif¬ 
ferent  application  needs. 


lem  at  hand,”  says  John  Watson,  co¬ 
founder  of  Quicksilver  Technologies 
Inc.,  a  developer  of  adaptive  computing 
technologies  in  San  Jose. 

Such  malleable  chips  represent  a 
fundamental  shift  in  microprocessor 
design,  says  Nick  Tredennick,  a  former 
microprocessor  architect  and  editor  of 
the  Gilder  Technology  Report  in  Great 
Barrington,  Mass. 

“All  the  microprocessors  that  we 
have  today  are  basically  30-  or  40-year- 
old  designs,”  says  Jim  Turley,  an  inde¬ 
pendent  analyst  in  Pacific  Grove,  Calif 
“We  are  fundamentally  making  the 
same  computers  our  grandfathers  did, 
even  though  silicon  technology  has  im¬ 
proved  dramatically.” 

Though  it  might  sound  radically  new, 
the  concept  of  adaptive  computing  ar¬ 
chitectures  has  been  floating  around  in 
one  form  or  another  for  some  time.  In- 

_  deed,  several  companies 

—  from  relatively  un¬ 
heard-of  start-ups  such 
as  Quicksilver  and  Gate- 
Change  Technologies 
Inc.  to  the  likes  of  Intel 
Corp.,  Motorola  Inc.  and 
Infineon  Technologies 
AG  —  have  efforts  under 
way  in  the  area  of  recon¬ 
figurable  computing. 

For  example.  Quicksilver  offers  an 
integrated  circuit  technology  that  dy¬ 
namically  changes  at  runtime  to  create 
the  hardware  needed  for  different  ap¬ 
plications.  Someday,  such  technology 
could  form  the  basis  of  a  universal  cell 
phone  or  be  used  in  flexible  automo¬ 
tive  electronics  components,  Watson 
says.  Similarly,  Intel’s  efforts  in  this 
area  include  a  project  to  develop  soft¬ 
ware-defined  radio  that  uses  software 
to  automatically  reconfigure  all  the 
hardware  logic  on  a  chip,  with  no  me¬ 
chanical  switching  of  circuitry. 

The  idea  is  to  eventually  build  a  gen¬ 
eral-purpose  wireless  communications 


processor 
that’s  capable 
of  executing 
multiple  stan¬ 
dards  and  proto¬ 
cols  and  offers 
better  perfor¬ 
mance  than  a  dedi¬ 
cated  application-spe¬ 
cific  integrated  circuit 
(ASIC),  says  Steve  Paw- 
lowski,  an  Intel  research  fellow 
focused  on  reconfigurable  logic. 

Such  efforts  have  gone  com-  — 
mercially  unnoticed  for  a  long 
time,  but  they’re  going  to  be 
crucial  in  tomorrow’s  unteth¬ 
ered  world,  Tredeimick  says. 
Conventional  processors  were 
designed  for  systems  that  were 
largely  static  and  derived  their  power 
from  wall  sockets,  he  says.  As  a  result, 
the  focus  of  most  early  microprocessor 
design  was  on  price/performance  per 
unit  —  squeezing  out  ever-faster  clock 
speeds  from  a  piece  of  silicon  while 
keeping  unit  costs  reasonably  low. 

With  the  advent  of  laptops  and  note¬ 
books,  the  focus  shifted  to  microproc¬ 
essor  power  levels  as  well,  Tredeimick 
says.  As  more  devices  start  going  mo¬ 
bile,  there  is  going  to  be  an  even  greater 
focus  on  price/performance  per  watt 
of  power  consumed,  he  says. 

Fixed-circuit  microprocessors  are 
quickly  reaching  certain  physical  limits 
that  will  make  it  extremely  hard  to 
maintain  the  power/performance  bal¬ 
ance  for  much  longer,  making  recon¬ 
figurable  architectures  inevitable  in 
the  untethered  world,  Tredennick  says. 

But  getting  there  isn’t  going  to  be 
easy,  everyone  agrees.  In  fact,  few  ex¬ 
pect  to  see  widespread  use  of  dynami- 
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cally  reconfig¬ 
urable  chips  with¬ 
in  five  years. 

Pawlowski  pre¬ 
dicts  that  it  will 
take  at  least  until  2007 
for  Intel’s  software  radio  ef¬ 
forts  to  become  commercially  viable. 
“We  have  to  first  prove  internally  that 
there  is  a  significant  product  benefit  in 
terms  of  costs,  power  and  area.  Our  mo¬ 
bile  power  people  are  expecting  longer 
battery  life  and  the  flexibility  to  handle 
multiple  protocols,”  he  says.  “We  are 
trying  to  find  the  perfect  fit.” 

Also,  technologies  such  as  ASICs 
and  field-programmable  gate  ar¬ 
rays  (FPGA)  already  offer 
some  of  the  same  benefits 
being  touted  by  adaptive 
architectiures.  ASICs  are 
special-purpose  chips  and 
are  more  efficient  at  doing 
specific  tasks  than  general- 
purpose  microprocessors. 

FPGAs  are  devices  whose  hardware 
logic  can  be  reprogrammed  in  the  field 
to  accept  hardware  updates  or  bug 
fixes.  But  neither  ASICs  nor  FPGAs  of¬ 
fer  the  flexibility  that  adaptive  archi¬ 
tecture  promises.  Both  technologies 
are  also  relatively  expensive  and,  in  the 
case  of  FPGAs,  too  power-hungry. 

Building  adaptive  chips  can  also 
be  difficult.  Writing  the  programs  that 
instruct  each  of  the  millions  of  logic 
gates  in  such  chips  to  open  and  close 
so  as  to  alter  the  circuitry  on  the  fly 
can  be  incredibly  complex. 

The  hardware  design  tools  to  do 
these  sort  of  tasks  are  only  just  emerg¬ 
ing,  Pawlowski  says. 

Also,  Turley  says,  “most  people 
haven’t  really  wrapped  their  heads 
around  how  to  create  and  manage 
computers  that  change  on  the  fly.”  Nor 
is  there  a  full  understanding  of  what 
applications  might  truly  benefit  from 
the  approach,  he  says.  For  the  moment, 
mobile  devices  present  the  biggest  op¬ 
portunity  for  adaptive  computing. 

“Someone  is  going  to  have  to  build  a 
very  high-volume  application  for  the 
case  to  be  really  compelling,”  Treden¬ 
nick  says.  “Nobody  has  done  anything 
that  is  really  [commercially]  success¬ 
ful”  so  far.  But  that  could  begin  chang¬ 
ing  soon,  he  says.  O  45334 
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Some  vendors  define  reconfigurable  compu/;/?g  loosely: 
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SecurityTools 
Search  Falls  Short 

Disk  encryption  and  identity  management 
products  on  display  at  the  RSA  Conference 
don’t  quite  fit.  By  Mathias  Thurman 


RECENTLY  attended  the 
RSA  Conference  in  San 
Francisco,  looking  for  in¬ 
formation  on  encryption 
and  identity  management 
products.  I  also  attended  ses¬ 
sions  on  identity  management, 
vulnerability  assessment,  se¬ 
curity  information  manage¬ 
ment  and  wireless  security.  All 
were  well  attended.  On  the 
show  floor,  meanwhile,  many 
vendors  had  found  a 
way  to  put  a  Sar- 
banes-Oxley  spin  on 
their  products. 

One  of  my  focus  ar¬ 
eas  this  year  is  mobile 
device  protection, 
particularly  disk  en¬ 
cryption.  I  decided  that  we 
needed  such  a  product  be¬ 
cause  20  to  30  mobile  devices 
go  missing  from  my  company 
each  year.  Most  of  those  are 
laptops,  along  with  a  few 
handheld  computers  and 
BlackBerry  e-mail  devices. 

A  few  of  the  company  lap¬ 
tops  that  disappeared  last  year 
were  assigned  to  executives 
and  contained  sensitive  infor¬ 
mation.  In  one  case,  an  execu¬ 
tive  responsible  for  software 
engineering  lost  a  machine 
that  contained  the  design  doc¬ 
uments  for  a  new  product  line, 
as  well  as  employee  contact 
lists,  financial  reports  and 
merger  and  acquisition  infor¬ 
mation.  All  the  data  resided 
within  an  unencrypted  direc¬ 
tory.  In  the  wrong  hands,  that 
data  could  have  had  a  signifi¬ 
cant  negative  impact  on  our 
company.  In  another  case,  a 
salesperson  reported  that  a 
laptop  containing  confidential 
price  lists  and  a  locally  cached 
customer  list  had  been  stolen. 

Now  I’m  looking  for  an  en¬ 
cryption  product  to  deploy 


first  on  the  machines  of  these 
“high-risk”  employees,  as  we 
refer  to  them,  with  an  eye  to¬ 
ward  potentially  installing  it 
on  the  thousands  of  machines 
in  use  throughout  the  compa¬ 
ny.  My  initial  choice  is  to  use 
the  Encrypted  File  System  fea¬ 
ture  that  comes  with  Win¬ 
dows.  Since  all  of  our  laptops 
use  Windows  2000  or  XP,  both 
of  which  include  EFS,  that  ap¬ 
proach  makes  a  lot 
of  sense. 

EFS  is  fairly  easy 
to  deploy,  allows  for 
a  key  escrow  capa¬ 
bility,  includes 
strong  encryption 
and  can  be  made 
seamless  to  the  user.  If  we 
want  to  do  so,  we  can  also  add 
two-factor  authentication  to 
further  improve  security. 
However,  standardizing  on 
EFS  leaves  out  other  mobile 
devices. 

Finding  a  single  encryption 
product  that  can  address  all  of 
these  devices  would  be  ideal, 
but  I  suspect  we  will  need  to 
deploy  several  different  ones. 
Unfortunately,  few  vendors  at 
the  show  had  products  in  this 
area,  and  I’m  not  too  excited 
about  the  products  I  did  see. 
I’ll  call  in  other  vendors  once  I 
complete  my  risk  analysis. 


We  needed  [a  disk 
encryption]  product 
because  20  to  30 
mobile  devices  go 
missing  from  my 
company  each  year. 


Identity  Crisis 

I  also  spent  some  time  with 
identity  management  product 
vendors.  Compliance  with 
regulations  like  Sarbanes-Ox- 
ley  is  a  big  issue  for  my  com¬ 
pany.  Identity  management 
tools  address  the  need  by  con¬ 
trolling  access  to  our  many 
homegrown  applications. 

About  80%  of  the  applica¬ 
tions  we  run  are  developed  in- 
house.  Although  many  are 
written  using  a  standard  plat¬ 
form  such  as  J2EE,  authentica¬ 
tion,  authorization  and  access 
isn’t  standardized.  Instead, 
each  application  is  a  separate 
entity  with  its  own  database  of 
users,  creating  a  management 
nightmare. 

Some  applications  support 
the  financial  aspect  of  our 
business,  which  is  where  Sar- 
banes-Oxley  comes  in.  Identi¬ 
ty  management  tools  could 
provide  a  single  point  of  user 
and  password  management, 
provisioning,  access  control 
and  authentication  for  all  of 
our  applications. 

One  control  that  we  might 
be  asked  to  test  is  the  ability 
to  quickly  remove  a  user’s  ac¬ 
cess  to  specific  financial  appli¬ 
cations.  Currently,  this  process 
requires  access  to  many  appli¬ 
cations  to  ensure  that  the 
user’s  account  is  disabled. 

With  an  identity  management 
system,  it  would  be  a  one-step 
process. 

The  promise  of  these  tools 
is  that  an  individual’s  identity 
and  access  rights  can  be  de¬ 
fined  and  managed  from  a  sin¬ 
gle  point.  The  vendor  market¬ 
ing  made  this  all  sound  fairly 
straightforward,  but  as  I  began 
peeling  the  veneer  off  the 
products,  there  was  a  familiar 
tone  to  it  all. 

The  state  of  identity  man¬ 
agement  reminds  me  of  when 
we  first  started  looking  at 
public-key  infrastructure 
(PKI)  about  18  months  ago. 


Vendors  and  integrators  gen¬ 
erated  a  lot  of  excitement  and 
made  many  promises,  but 
when  they  got  down  to  the  de¬ 
tails,  we  found  that  we  could 
enable  only  certain  aspects  of 
our  business  for  PKI,  not 
everything.  Interoperability, 
resources  and  cost  became  is¬ 
sues.  It  just  didn’t  make  sense 
at  the  time,  so  we  put  it  on  the 
back  burner  and  eventually 
lost  funding  for  it. 

Another  potential  benefit  of 
identity  management  is  the 
ability  to  share  aspects  of  a 
user’s  identity  between  enti¬ 
ties,  whether  they  are  within 
the  confines  of  the  corporation 
or  between  organizations.  But 
this  means  I  must  trust  the  oth¬ 
er  company  with  my  employee 
identity  information.  Vendors 
call  such  sharing  of  identity  el¬ 
ements  “federated  identity 
management,”  but  they  sup¬ 
port  two  competing  standards 
in  this  area:  Web  Services  Fed¬ 
eration  and  Liberty  Alliance. 
WS-Federation  was  developed 
by  a  group  of  companies  that 
includes  Microsoft  Corp.,  IBM, 
Verisign  Inc.,  BEA  Systems  Inc. 
and  RSA  Security  Inc.  The  Lib¬ 
erty  Alliance  is  more  of  an 
open-source  community  proj¬ 
ect.  At  this  point.  I’ve  decided 
to  wait  for  a  clear  standard  to 
emerge  and  for  the  inevitable 
vendor  shakeout. 

Back  at  the  office,  the  most 
pressing  issue  is  establishing 
security  standards.  Setting  ap¬ 
plication  security  standards 
seems  to  be  very  time-con¬ 
suming  for  us.  I’m  meeting 
with  development  team  man¬ 
agers  to  ensure  that  what  we 
come  up  with  makes  sense  and 
is  attainable.  I  should  be  done 
in  the  next  few  weeks.  Then  I 
can  turn  to  other  issues  on  the 
project  hst:  patch  management, 
wireless  security,  vulnerability 
assessment  scaiming,  personal 
firewalls  and  security  informa¬ 
tion  management.  R 

WHAT  DO  YOU  THINK? 

This  week’s  journal  is  written  by  a  real  securi¬ 
ty  manager.  "Mathias  Thurman,"  whose 
name  and  employer  have  been  disguised  for 
obvious  reasons.  Contact  him  at  mathias. 
thurman@yahoo.com,  or  join  the  discussion 
in  our  forum:  QuickUnk  a1590 

To  find  a  complete  archive  of  our 
Security  Manager’s  Journals,  go  online  to 

O  computerworid.com/secjoumal 
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Recommended 

Reading 

Anyone  who  wants  to  know 
more  about  federated  identity 
management  should  read  the 
white  paper  “Liberty  Alliance 
&  WS-Federatioii:  A  Compara¬ 
tive  Overview”  at  the  Liberty 
Alliance  Project  Web  site. 

You’ll  find  the  PDF  at  Quick- 
Link  a4150. 

^  :  -  Mathias  Thunnan 


Exploits  Target 
Confidential  Data  ^ 

More  exploits  than  ever  are 
putting  confidential  user  data 
at  risk,  according  to  Symantec 
Corp.’s  recently  released  “In¬ 
ternet  Security  Threat  Re¬ 
port.”  The  percentage  of  the 
top  10  threats  attacking  user 
data  increased  to  77.9%,  and 
the  reach  of  those  exploits  has 
increased,  with  the  volume  of 
submissions  rising  by  519%. 
Among  the  growing  blended 
threats  are  stealing  docu¬ 
ments,  passwords,  keystrokes 
and  encryption  keys,  the  Cu¬ 
pertino,  Calif.-based  antivirus 
software  vendor  says.  The  re¬ 
port,  which  includes  a  list  of 
the  top  10  threats,  is  posted  at 
www.symantec.com. 


Percentage  of  top  10  exploits  that 
present  a  threat  to  confidential  data: 

JULY -DECEMBER  2002 


NetScreen 
Updates  IDS 

NetScreen  Technologies  Inc. 
in  Sunnyvale,  Calif.,  has  an¬ 
nounced  a  new  version  of 
intrusion-detection  and  -pre¬ 
vention  software  for  its  Net- 
Screen-IDP  line  of  hardware. 
IDP  3.0  includes  features  for 
analyzing  network  and  appli¬ 
cation  traffic,  thwarting  Inter¬ 
net  worm  outbreaks  and  spot¬ 
ting  rogue  applications.  The 
software,  which  ships  in  early 
April,  will  run  on  the  full  line  of 
NetScreen-IDP  products. 


5^ 


These  days,  no  network  is  free  of  threats.  That’s  why  you  have  to  assign  network  security  privileges  to  everyone.  Employees,  customers, 
and  partners.  You  need  to  set  an  acceptable  use  poUcy  that  dictates  what  each  of  them  can  and  can’t  access.  Until  now,  you  had  to  do 
this  manually. 

Not  anymore.  Now  you  can  do  what  Baylor  University  did.  Implement  an  Enterasys  Secure  Networks™  solution  with  a  unique,  policy- 
based  system  that  empowers  the  network  to  allocate  resources  based  on  specific  users  and  their  roles.  The  network  “sees”  who  the  user 
is  and  assigns  privileges  accordingly.  This  improved  control  also  gives  you  more  security. 

It’s  all  about  giving  you  a  smarter  way  to  network  with  central,  intuitive  management.  Find  out  more  at  networksthatknow.coniyBaylor. 
Or  ask  any  one  of  the  many  enterprise  customers  we’ve  worked  with  for  years. 


GETTING  NCu; 
N£Tu;ORK  $£C(;ritv 
PRIV1(.£:G£$  for  8G0 
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NetlQ  Launches 
AppManager  Beta 

NetlQ  Corp.  in  San  Jose  has  an¬ 
nounced  a  beta  version  of  Net 
AppManager  6.0,  which  is  de¬ 
signed  to  enable  IT  groups  to 
manage  service  delivery  to  inter¬ 
nal  users  in  networks  and  sys¬ 
tems.  It  is  also  able  to  measure 
compliance  with  service-level 
agreements.  The  beta  version  of 
Net  AppManager  6.0  is  available 
now;  the  product  will  be  generally 
available  before  July.  It  is  priced 
at  $2,500. 


Red  Earth  Boosts 
Policy  Patrol 

Red  Earth  Software  LLC  in 
Portsmouth,  N.H.,  announced 
Policy  Patrol  Version  3.0,  a  set  of 
software  products  for  e-mail  fil¬ 
tering.  New  features  include  im¬ 
proved  spam  protection  through 
Bayesian  filtering,  remote  image 
detection  and  word-pattern 
matching.  Policy  Patrol  Enterprise 
includes  content  checking  and  at¬ 
tachment  blocking.  Pricing  ranges 
from  $95  to  $395  per  10  users. 


IBM  to  Sell  Opteron 
Workstation 

IBM  in  May  will  sell  the  Intelli- 
Station  A  Pro,  an  Opteron-based 
workstation,  with  pricing  starting 
at  $2,619.  IBM  will  load  Red  Hat 
Enterprise  Workstation  3.0,  which 
will  support  32-  and  64-bit  appli¬ 
cations,  on  the  workstation  if 
needed.  It  will  also  support  SUSE 
Linux  and  Microsoft  Windows. 


Veritas  Upgrades 
Storage  ^ftware 

Veritas  Software  Corp.  in  Moun¬ 
tain  View,  Calif.,  announced  it  has 
upgraded  its  Cluster  Server  and 
Volume  Replicator  storage  soft¬ 
ware  products,  integrating  them 
as  a  disaster  recovery  suite.  Both 
offer  the  ability  to  fail  over  appli¬ 
cations  and  replicate  data  over  an 
IP  network.  Cluster  Server  4.0 
starts  at  $2,995,  and  Volume 
Replicator  starts  at  $4,495. 


TOMMY  PETERSON 


rr  Must  Earn 
Respect  Anew 


THECEOOFA  software  company  told  me 
recently  that  the  “defensiveness”  of  IT 
organizations  is  one  of  the  most  pervasive 
problems  in  the  industry  these  days.  It  un¬ 
dermines  their  standing  within  their  com¬ 
panies  and  reduces  their  influence  in  decision-making. 


He  asked  me  not  to  at¬ 
tribute  the  comment  to  him 
because  “the  last  thing 
those  people  want  to  hear 
is  some  vendor  suggesting 
they’ve  got  a  bad  attitude.” 

That  CEO  is  not  alone  in 
noting  that  something  has 
gone  sour  in  IT’s  relation¬ 
ship  with  both  the  business 
side  and  users.  The  barely 
veiled  hostility  between  IT 
groups  and  the  folks  who 
sit  on  mahogany  row  and  in 
the  cube  clusters  has  become  a  com¬ 
mon  topic  of  conversation. 

There  are  good  reasons  for  IT  work¬ 
ers  to  be  edgy.  Those  whose  jobs 
haven’t  been  eliminated  or  sent  over¬ 
seas  are  working  harder  with  smaller 
budgets  —  and  they’re  getting  a  lot 
less  respect  for  the  work  they  do.  It’s 
the  respect  factor  that  may  be  the  crux 
of  the  issue. 

Several  years  ago,  I  worked  in  the 
headquarters  of  a  large  newspaper 
chain.  The  IT  staff  had  convinced 
management  that  physical  security  for 
the  computer  room  was  crucial,  and 
they  had  sequestered  themselves  away 
in  a  windowless  corner  office,  barri¬ 
caded  by  a  reinforced  door  with  a 
combination  lock. 

They  ventured  out  of  their  fortress 
only  to  chastise  us  users  about  cyber¬ 
hygiene  and  to  restart  applications 
that  had  been  fouled  by  stupid-user 
tricks.  We  viewed  them  as  eccentric, 
and  they  irritated  us  with  their  arro¬ 
gance.  But  they  knew  things  we  didn’t, 
and  in  truth,  they  saved  our  butts 


more  times  than  we  liked 
to  admit. 

At  one  point,  upper 
management  began  hud¬ 
dling  with  the  in-house 
geeks  and  a  gaggle  of  con¬ 
sultants,  trying  to  choose  a 
new  “front-end”  system  — 
although  we  doubted  the 
execs  actually  knew  the 
difference  between  a  front 
end  and  back  end. 

Management  even  hired 
a  vice  president  charged 
with  developing  our  online  operation. 
It  seemed  that  the  geeks  were  going 
to  rescue  our  content  from  legacy 
media,  too. 

But  it  didn’t  quite  work  out  that 
way.  The  vice  president  lost  his  job  in 
a  round  of  downsizing.  The  fortress 
was  dismantled  when  half  the  build¬ 
ing  was  leased  to  another  company. 
The  IT  staff  now  runs  itself  ragged 
maintaining  the  operation  and 
searching  out  troublesome  rogue  ap¬ 
plications  that  have  been  installed  by 
users  who  have  become  too  smart  for 
their  own  good. 

In  that  business,  as  in  many  others, 
IT  has  been  demystified  both  by  a  sim¬ 
ple  process  of  increasing  user  familiar¬ 
ity  and  by  design,  as  complex  technol¬ 
ogy  has  been  pushed  down  through 
organizations.  The  IT  department  is 
no  longer  populated  by  the  keepers  of 
arcane  technical  secrets;  it’s  a  support 
service. 

At  the  upper-management  level, 
technology  is  no  longer  an  adventure 
—  CIOs  had  better  be  able  to  prove 
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that  the  IT  strategy  lines  up  with  the 
greater  business  strategy  of  the  com¬ 
pany,  or  they  won’t  be  around  very 
long. 

This  is  a  natural  progression  as  the 
industry  matures,  but  that  doesn’t 
make  it  any  easier  to  swallow  for  the 
people  whose  status  has  declined  as 
the  uncertainties  of  their  jobs  have 
escalated. 

In  many  cases,  IT’s  response  is,  well, 
defensiveness.  When  I  returned  to  the 
newsroom  the  day  I  spoke  to  that 
CEO,  I  checked  the  Computerworld 
Web  site  for  coverage  of  our  Premier 
100  conference.  There  I  found  a  de¬ 
scription  of  the  verbal  sparring  be¬ 
tween  Bob  Metcalfe,  father  of  Ethernet 
and  defender  of  the  IT  faith,  and 
Nicholas  Carr,  author  of  the  infamous 
“IT  Doesn’t  Matter”  article  that  ap¬ 
peared  in  the  Harvard  Business  Review 
last  May.  Metcalfe’s  spirited  and  witty 
defense  of  the  industry  [QuickLink 
45332]  was  no  surprise,  nor  was  Carr’s 
slightly  peevish  but  exceedingly  lucid 
defense  of  his  contention  that  IT  can 
no  longer  offer  companies  a  competi¬ 
tive  advantage. 

The  surprise  came  in  the  intensity 
of  emotion  demonstrated  by  the  IT 
executives  in  the  audience.  They  kept 
the  debate  going  with  comments  and 
questions  half  an  hour  over  its  allotted 
time,  and  many  in  the  crowd  were 
clearly  very  angry  at  Carr.  Despite  the 
provocative  title  of  his  article,  Carr 
acknowledges  that  IT  is  absolutely 
essential  to  modern  business  —  it’s 
just  not  going  to  drive  the  business 
models  of  non-high-tech  companies. 

IT  is  used  to  leading  the  parade.  Yet 
it  will  earn  back  the  respect  it  has  lost 
only  by  making  the  adjustments  need¬ 
ed  to  march  in  step  with  the  rest  of  the 
band.  O  45517 
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Play  War! 

War  games  can  make  strategic  plan¬ 
ning  come  to  life.  Companies  can 
simulate  business  moves  —  such  as 
strategic  IT  investments  —  as  well  as 
competitors’  countermoves.  Page  42 


Career  Watch 

Vince  Campitelli  describes  the 
work  of  IT  auditors  at  Wachovia 
Corp.  and  gives  career  advice  for 
IT  professionals  considering  a 
move  into  IT  auditing.  Page  44 
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OPINION 

The  Case  for  IT  Leasing 

Are  you  sure  you  want  to  purchase  that  new  com¬ 
puter?  Norbert  Kubilus  says  today’s  flexible  leasing 
deals  can  be  a  very  attractive  way  of  turning  over 
some  IT  risks  to  the  leasing  company.  Page  45 
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To  A  CIO,  OUTSOURCING  contracts  may  look  like 
other  procurement  and  service  agreements,  but 
they’re  much  riskier.  “You’re  writing  a  contract 
for  a  service  that’s  impossible  to  describe,  that 
will  change  over  time  and  need  to  be  renegotiat¬ 
ed,  that  will  make  you  dependent  on  the  service  provider 
and  for  which  termination  is  not  an  option,”  says  Paul  Roy,  a 
partner  at  Mayer,  Brown,  Rowe  &  Maw  LLP  in  Chicago,  who 
has  put  together  some  of  the  largest  outsourcing  deals  in  his¬ 
tory.  “That’s  not  an  ideal  negotiating  position,”  he  adds. 

Roy  and  other  attorneys  who  specialize  in  outsourcing 
have  seen  the  challenges  CIOs  face  when  they  sit  down  to 
negotiate  outsourcing  deals.  Here’s  some  advice  on  gotchas 
that  can  undo  the  unwary: 

PROBLEM:  Unresolved  issues.  Amid  the  pressure  to  get 
the  deal  done,  the  outsourcer  may  push  you  to  sign  before 
pricing  or  service  levels  are  nailed  down,  promising  only  mi¬ 
nor  adjustments  later.  “The  supplier  may  say,  ‘This  is  stan¬ 
dard;  we  do  this  all  the  time,’  ”  says  Bob  Zahler,  a  partner  in 
the  outsourcing  practice  at  Shaw  Pittman  LLP  in  Washing¬ 
ton.  “But  in  our  experience,  in  every  case  that  has  produced 
a  bad  result.” 

SOLUTION:  “It’s  much  better  to  resolve  those  things 
beforehand,  even  if  it  means  delaying  the  signing,” 

Zahler  says.  It  takes  many  months  to  put  together  an  out¬ 
sourcing  deal,  he  adds,  so  if  you  know  you  don’t  have  suffi¬ 
cient  data  to  establish  service  levels  or  pricing,  start  measur¬ 
ing  immediately. 

Hidden  traps  lurk  in  every 
outsourcing  contract.  Here 
are  12  BIG  ONES -and  how 
you  can  avoid  them. 

BY  KATHLEEN  MELYMUKA 
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PROBLEM:  Fixed  service  levels  and  incentives 
can  become  antiquated  over  time. 

SOLUTION:  Design  the  agreement  to  be  flexi¬ 
ble  so  you  can  add  and  remove  service  levels 

and  set  incentives  so  you  can  move  from  one  service 
level  to  another,  says  Roy.  Include  a  mechanism  that 
allows  you  to  ratchet  up  service  levels  to  keep  pace 
with  the  market,  focus  on  things  that  create  business 
value  and  adapt  over  time. 


PROBLEM:  Fuzzy  scope.  The  standard  contract 
has  voluminous  descriptions  of  scope  of  service  — 
often  in  excess  of  100  pages,  Zahler  says  —  but 
they’re  written  by  technical  people  who  aren’t  as 
precise  and  detailed  as  they  should  be.  “And  clients 
don’t  read  them,”  he  adds. 

SOLUTION:  Zahler’s  firm  breaks  IT  into  77  de¬ 
tailed  processes  based  on  industry  standards 

and  creates  a  matrix  with  processes  down  the  left 
side  and  the  client’s  description  of  his  IT  group 
across  the  top.  Then  they  color-code  supplier  and 
customer  responsibilities.  “It’s  easier  to  do  a  contract 
that  way  and  it  gets  clients  to  focus  on  scope  of  ser¬ 
vice,”  he  says. 


PROBLEM:  Tasks  missing  from  scope.  No 

matter  how  careful  you  are  with  the  scope  of  work, 
you’ll  miss  something,  and  that  can  cost  you  more, 
Roy  says. 

SOLUTION:  Build  in  a  “dragnet”  clause  that 
states  the  following: 

■  The  outsourcer  will  do  everything  your  staff  did 
over  the  preceding  12  months,  even  if  you  neglect  to 
list  it. 

■  The  outsourcer  commits  to  perform  the  function 
as  it’s  performed  in  the  market,  recognizing  that 
things  will  change  over  time. 


PROBLEM:  Exclusivity.  In  order  to  get  economies 
of  scale,  critical  mass  and  broad  integration,  the  out¬ 
sourcer  will  want  the  exclusive  right  to  perform  the 
functions  in  the  contract.  “But  think  very  carefully 
about  this,”  Roy  says.  “Not  all  suppliers  have  equal 
capability  in  all  functions.  This  is  one  of  the  biggest 
problems  we  see.” 

SOLUTION:  Retain  the  right  to  perform  the 
function  in-house  or  send  it  to  a  third  party, 

Roy  says.  This  right  allows  you  to  maintain  competi¬ 
tive  pressure  on  the  outsourcer  and  test  service  lev¬ 
els  in  categories  where  there  may  be  problems.  If 
the  outsourcer  is  weak  in  one  function  or  region,  you 
can  take  back  that  piece  or  give  it  to  someone  else. 
“Where  you  have  multiple  outsourcing  agreements, 
over  time  you  may  find  that  what  you’ve  outsourced 
to  one  supplier  really  fits  better  with  another,”  Roy 
says.  “This  enables  you  to  reorganize  the  matrix  of 
outsourcing  functions.” 


PROBLEM:  Damages  waivers.  The  outsourcer 
wants  to  cap  reimbursements  for  direct  damages  — 
out-of-pocket  expenses  you  pay  because  of  its  fail¬ 
ures  —  and  completely  waive  indirect  or  consequen¬ 
tial  damages,  such  as  lost  profits  or  a  decline  in  stock 
price,  as  a  result  of  such  failures.  “That  means  if  you 
outsource  the  call  center  and  the  vendor  messes  up 
and  you  lose  $10  million  in  profits,  if  it  didn’t  ‘cost’ 
you  anything,  you  would  have  essentially  no  re- 


WATCH  WHAT 
YOU  WISH  FOR 

IN  THE  “HOT  FLUSH  OF  ROMANCE,” 

both  parties  want  to  get  the  deal  done  and  see  the 
benefits  as  soon  as  possible,  says  Gregg  Kirchhoe- 
fer,  a  partner  at  Kirkland  &  Ellis.  “It’s  hard  to  think 
of  the  negotiation  process  as  anything  other  than  a 
hindrance.”  he  says.  But  try  to  view  it  as  an  oppor¬ 
tunity  to  identify  problems,  deal  with  those  issues 
and  lay  the  foundation  upon  which  the  relationship 
can  grow  and  prosper  in  the  long  term. 

There’s  a  certain  adversarial  element  to  any 
contract  negotiation,  but  don’t  get  so  tied  up  on 
gaining  the  upper  hand  that  you  blow  the  long-term 
benefits  for  short-term  advantage.  “Be  careful 
what  you  ask  for,  because  you  just  might  get  it,” 
Kirchhoefer  says.  An  outsourcing  arrangement  is 
like  a  three-legged  stool:  scope  of  services,  perfor¬ 
mance  and  price,  he  explains.  “If  you  lengthen  or 
shorten  one,  the  rest  gets  out  of  balance,”  he  says. 

Realize  that  both  parties  have  legitimate  inter¬ 
ests,  and  fashion  a  contract  to  build  and  foster  the 
relationship,  he  says.  “Otherwise,  you  may  win  the 
negotiation  but  create  a  dynamic  that’s  a  disser¬ 
vice  to  what  you’re  trying  to  accomplish,  a  breach 
waiting  to  happen.” 

-  Kathleen  Melymuka 

course,”  says  Brad  Peterson,  a  partner  in  the  out¬ 
sourcing  practice  at  Mayer  Brown.  “It  is  one  of  the 
most  dangerous  provisions.” 

SOLUTION:  This  is  difficult  to  work  around, 
Peterson  says,  but  three  tactics  may  help: 

■  Try  to  negotiate  the  cap  on  direct  damages  as  high 
as  possible.  The  outsourcer  will  want  to  limit  it  to 
one  to  three  months’  revenue;  try  for  12  to  24  months. 
“Get  the  number  high  enough  to  provide  a  meaning¬ 
ful  remedy,”  Peterson  says. 

■  If  you  must  waive  indirect  damages,  demand  as 
many  exclusions  as  you  can.  For  example,  retain  the 
right  to  indirect  damages  if  the  outsourcer  fails  to 
provide  termination  assistance  or  if  your  company  is 
sued  for  intellectual  property  infringement  based  on 
software  the  outsourcer  is  using. 

■  Make  sure  the  contract  defines  specific  amounts 
the  outsourcer  will  pay  if  it  fails  to  perform. 


PROBLEM:  Decreasing  costs.  Technology  costs 
—  especially  in  areas  like  telecommunications  —  can 
decline  dramatically  over  time,  but  an  outsourcing 
contract  can  span  five  to  10  years.  How  do  you  avoid 
overpaying? 

SOLUTION:  Write  short-term  contracts  for  the 
most  volatile  pieces,  or  allow  the  outsourcer  to 
provide  the  service  on  the  condition  that  it  passes 
through  to  you  any  cost  reductions  from  its  supplier 
on  a  dollar-for-dollar  basis.  (You  can  require  the  out¬ 
sourcer  to  disclose  its  costs  or  certify  when  it  has 
renegotiated.)  “The  supplier  keeps  the  margin,  but 
they  don’t  get  a  windfall,  and  this  allows  you  to  get 
into  a  longer-term  contract,”  Roy  says. 


PROBLEM:  Benchmarking  can  be  ineffective 


in  complex  outsourcing  deals  because  it’s  very  | 

difficult  to  find  comparable  situations  at  other  j 

companies.  j 

SOLUTION:  Benchmark  the  prices  of  individual 
components  and  regions,  Roy  suggests.  For  exam¬ 
ple:  How  much  are  you  paying  for  application  pro¬ 
grammers  in  India  compared  with  the  competition? 

Keep  in  mind  that  this  type  of  benchmarking  re¬ 
quires  the  outsourcer  to  charge  a  straightforward  j 

amount  for  each  component.  That  means  no  cross-  j 

subsidizing  (subsidizing  an  expensive  element  in  j 

the  contract  —  say,  mainframe  maintenance  —  by  i 

raising  profits  on  another  element,  such  as  applica-  I 

tions  development). 


PROBLEM:  Lock-in.  For  business  reasons,  you  I 

may  need  to  terminate  the  outsourcing  contract  for 
convenience  —  that  is,  without  a  failure  or  breach  li 

from  the  outsourcer.  But  the  fee  can  be  prohibitive. 

SOLUTION:  Outsourcers  try  to  set  a  termina- 
tion-for-convenience  fee  as  high  as  possible  | 

to  lock  you  in,  says  Peterson,  but  be  sure  it’s  low  ' 

enough  that  termination  remains  an  option.  i 

.  I 

PROBLEM:  Ownership  of  intellectual  property  ij 

developed  in  the  course  of  outsourcing  is  al-  | 

ways  in  contention.  You  want  to  own  what  you’ve  ^ 

paid  for.  The  outsourcer  wants  to  own  what  it  has  j 

developed.  j, 

SOLUTION:  Focus  on  whether  the  application  ' 

is  strategic  to  your  business,  says  Gregg  Kirch-  | 

hoefer,  a  partner  at  Kirkland  &  Ellis  LLP  in  Chicago.  j 

If  an  application  isn’t  strategic,  let  it  go,  but  you  may  | 

want  to  negotiate  some  return  on  that  investment  in  i 

terms  of  royalties  or  other  compensation.  | 


PROBLEM:  The  outsourcer’s  people  are  criti-  | 

cal  because  of  the  close  interaction  between 
supplier  and  customer,  but  you  have  to  cede  control  ' 

of  personnel.  i 

SOLUTION:  Retain  the  right  to  approve  six  to  j 

12  people  in  certain  key  positions  who  solve 
problems  and  interface  with  management,  such  as  1 

project  executives,  help  desk  managers,  systems  ar-  | 

chitects  and  software  troubleshooters,  Roy  says.  Get  | 

commitments  that  those  people  will  stay  on  for  a  1 

reasonable  minimum  time  and,  when  they  do  leave, 
that  you’ll  interview  and  approve  their  replacements.  i 

Retain  the  right  to  request  reassignment  of  people  ( 

who  don’t  work  out  and  to  hire  the  outsourcer’s  staff  ^ 

at  the  end  of  the  deal.  ; 


PROBLEM:  Ignoring  termination  issues.  In  > 

the  eagerness  to  get  the  deal  done,  people  often  1 

pay  insufficient  attention  to  termination,  causing  1 

trouble  later.  j 

SOLUTION:  Focus  on  what  should  happen  un-  t 

der  various  circumstances:  termination  at  the  j 

end  of  the  contract,  termination  for  cause  or  termi-  i 

nation  for  convenience.  Carefully  consider  the  rights  * 

and  responsibilities  of  each  party  in  each  circum-  j 

stance,  and  be  sure  the  contract  reflects  that,  says  ; 

Kirchhoefer. 

“When  [termination]  happens,  the  parties  won’t  be  j 
talking  as  much  and  won’t  be  as  interested  in  helping  . 

each  other  out,”  he  notes,  “so  you  want  to  have  clear-  | 

cut  rules.”  O  45017  ' 


Time  is  money.  So  it’s  important  to  get  new  business  software  up  and  running  quickly.  Which  is  why  SAP^  solutions  built  on  the  open 
SAP  NetWeaver™  platform  make  so  much  sense.  Because  they’re  designed  with  fast  implementation  in  mind,  you  can  see  business  results  quickly. 
Visit  sap.com/speed  or  call  800  880  1727  to  see  how  fast  SAP  can  make  things  happen  for  your  company. 
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They  didn’t  understand 
the  threat  until  it  was  too 
late.  For  years,  the  cyberat¬ 
tacks  came,  increasing  in  so¬ 
phistication  and  growing  in 
the  damage  they  did  to  the 
U.S.  economy  and  to  certain  targeted 
industries  in  particular.  Just  when  the 
nation  was  awakening  to  the  nature  of 
the  threat  —  thanks  to  a  defector  from 
the  enemy  side  —  the  enemy  country 
switched  to  bioattacks.  Like  the  cyber¬ 
attacks,  these  were  hard  to  pin  down. 
(That  outbreak  of  mad  cow  disease 
was  an  accident,  wasn’t  it?) 

So  clever  were  the  attacks  that  in 
most  cases,  U.S.  officials  didn’t  know 
just  where  they  were  coming  from.  As 
a  result,  their  foreign  policy  toward  the 
originating  country  was  wholly  inap¬ 
propriate:  They  spent  billions  on 
weapons  to  defend  against  a  military 
threat,  when  in  fact  the  opposing  coun¬ 
try  was  hellbent  on  economic  warfare. 

Fortimately  for  the  U.S.,  this  isn’t  a 
true  story.  It’s  a  brief  summary  of  a  two- 
day  war  game  that  played  out  recently 
in  Newport,  R.I.  Put  on  by  the  military 
strategy  experts  at  Alidade  Inc.,  the 
game  pitted  a  Blue  Team  (the  U.S) 
against  a  Red  Team  (an  Asian  country, 
perhaps  China).  The  players  were 
mostly  military  types  hoping  to  hone 
their  strategy  skills,  but  some  players, 
including  this  reporter,  were  there  to 
see  how  war-game  concepts  might  be 
applied  in  the  commercial  world. 

The  teams  began  by  deciding  how  to 
spend  their  military  budgets  —  $300 


RED 

TEAM 

©blue 

TEAM 


Professional  illustrators 
from  Alphachimp  Studio 
Inc.  worked  in  r^  time 
throughout  the  two-day 
war  game  to  chronicle 
the  strategies,  moves  and 
countermoves  of  the  Red 
Team  and  the  Blue  Team. 


Strategic  planning  comes  to  life  when  war 
games  are  used  to  simulate  business  moves  - 
such  as  IT  investments  -  and  countermoves. 
BY  GARY  H.  ANTHES 


moves  in  any  of  those  directions.  In¬ 
stead,  it  focused  on  beefing  up  its  cy¬ 
berwar  capabilities,  both  offensive  and 
defensive,  while  making  various  cos¬ 
metic  overtures  to  Blue,  such  as  pro¬ 
posing  to  establish  joint  projects  in 
biotechnology,  ecology  and  IT. 

Red  Team  Commander  Scott  Borg,  a 
senior  research  fellow  at  the  Institute 
for  Security  Technology  Studies  at 
Dartmouth  College,  describes  Red’s 
winning  strategy  this  way:  “We  knew 
Blue  wouldn’t  attack  us,  and  we  knew 
we  couldn’t  win  any  military  conflict 
with  them.  So  we  made  it  an  economic 
war.”  Although  Borg  conceived  of  most 
of  Red’s  ideas,  he  nevertheless  learned 
something  new  from  them.  “It  will 
keep  me  awake  at  night,”  he  says.  “It’s 
made  me  realize  all  the  things  a  Red 
Team  really  can  do.” 


billion  for  Blue,  $30  billion  for  Red  — 
and  over  the  course  of  five  moves, 
each  one  covering  a  period  of  five 
years.  Blue  and  Red  took  turns  acting 
and  reacting  with  various  military  and 
foreign-policy  actions.  For  example, 
when  Blue  and  Orange  —  Orange  is  a 
country  in  Red’s  region  with  close  eco¬ 
nomic  ties  to  Red  —  agreed  to  a  joint 
military  exercise.  Red  saw  it  for  what  it 


was:  a  naked  attempt  by  Blue  to  exer¬ 
cise  influence  in  Red’s  back  yard. 

The  Red  Team,  meeting  in  a  hotel 
conference  room  next  to  Blue,  consid¬ 
ered  six  responses,  including  doing  its 
own  military  exercises  with  Orange, 
funding  massive  high-tech  economic 
development  in  Orange  and  threaten¬ 
ing  nuclear  proliferation  in  the  region. 

Red  ended  up  making  only  token 


Mismatched  Moves 

Jeffery  Cares,  president  of  Alidade  and 
a  self-styled  “military  irmovation  ex¬ 
pert  and  naval  futurist,”  says  teams  in 
war  games  often  misread  each  other 
and  respond  inappropriately.  “Often 
Blue  plays  A/counter  A,  while  Red 
plays  D/counter  D.”  That’s  what  hap¬ 
pened  in  this  game. 

And  that’s  what  often  happens  in  the 
corporate  world,  where  companies  with 
entrenched  strategies  —  reinforced  by 
success  —  fail  to  anticipate  out-of-the- 
box  competitive  moves.  For  example, 
IBM  in  the  1970s  failed  to  foresee  com¬ 
petition  for  the  mainframe. 

War  games  can  be  a  uniquely  effec- 
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In  Move  2,  Red  considers  and  takes  a  number 
of  options  aimed  at  giving  the  appearance  of 
cooperation  with  Blue  while  overtly  and 
covertly  competing  economically. 


In  Move  3,  Blue  still  has  trouble  understanding  the  economic  and  cyber 
war  game  that  Red  is  playing. 
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tive  way  for  corporations  to  do  long- 
range  planning  for  investments,  in¬ 
cluding  IT  investments,  says  Paul  A. 
Strassmann,  a  lecturer  in  national  se¬ 
curity  studies  at  Syracuse  University 
and  a  Computerworld  columnist.  “I  am 
a  strong  believer  that  war-gaming  will 
displace  much  of  what  these  days  is 
called  corporate  strategic  plaiming,”  he 
says.  Strassmann  is  a  former  CIO  at 
several  Fortune  50  companies  and  a 
former  member  of  the  Pen¬ 
tagon’s  war-gaming  simula¬ 
tion  review  board. 

The  time  has  passed  when 
IT  can  justify  its  budget 
solely  on  the  basis  of  its 
contribution  to  the  efficien¬ 
cy  of  the  corporation, 

Strassmann  says.  It  must 
now  work  at  a  more  strate¬ 
gic  level.  “Global  competi¬ 
tion  is  now  conducted  in 
terms  of  commercial  infor¬ 
mation  warfare,  and  IT  is  a 
weapon  of  choice,”  he  says. 

“So  competitive  planning  in 
the  commercial  sector  really 
becomes  war-gaming.  Then 
the  question  is.  Will  the  CIO  get  a  seat 
at  the  table  when  the  game  is  played?” 

Virtually  all  companies  do  long- 
range  planning.  But  doing  “what  if” 
speculations  with  co-managers  aroimd 
the  boardroom  table  doesn’t  produce 
the  kinds  of  insights  and  discoveries 
that  players  say  can  come  out  of  a  for¬ 
mal  war  game.  “The  worst  thing  that 
can  happen  in  strategic  plarming  is  that 


the  boilerplate  plan  from  last  year  is 
dusted  off,  the  blanks  are  filled  in,  it’s 
distributed,  and  people  immediately 
file  it  on  the  shelf  next  to  last  year’s 
plan,”  says  D.  Scott  Frondorf,  president 
of  Nextscale  Inc.  in  Cincinnati  and  a 
member  of  the  Blue  Team  in  Newport. 

“You  have  to  do  something  that  brings 
the  strategic  plan  to  life,”  Frondorf  says. 
“You  have  to  give  it  character  and  a 
space  in  which  to  operate.  Something 
like  a  war  game  does  exactly 
that.  In  fact,  it  could  be  a  test 
for  the  boilerplate  plan.” 

Testing  the  boilerplate  is 
just  what  a  major  manufac¬ 
turer  did  in  a  recent  war 
game,  Strassmann  says.  The 
game  pitted  a  Red  Team, 
consisting  of  managers  who 
had  put  together  a  tradition¬ 
al  five-year  plan,  against  a 
Blue  Team  of  lower-level 
line  managers  responsible 
for  making  the  plan  happen. 
Perversely,  this  arrangement 
forced  those  who  had  devel¬ 
oped  the  plan  to  attack  the 
company  trying  to  live  by  it. 
“The  result  was  counterintuitive”  for 
the  participants,  says  Strassmann,  who 
moderated  the  game.  “At  the  end  of  the 
game,  everybody  said,  ‘Hell,  we  didn’t 
know  this.’  ” 

“The  top  management  that  prepared 
the  plan  had  never  walked  the  shoes  of 
the  other  guy,”  Strassmann  says.  “Now 
that  they  had  Red  shoes  on,  they  saw 
the  vulnerabilities  of  the  Blues  and 


“We  did  some  hoopla,”  says  for¬ 
mer  CIO  and  IT  strategist  Paul  A. 
Strassmann,  who  moderated  a  re¬ 
cent  war  game  at  a  major  compa¬ 
ny  he  won’t  name.  “We  dressed 
the  Red  Team  in  East  German  sur¬ 
plus  uniforms.  The  game  was  held 
off-site,  and  because  this  was 
war,  everybody  had  to  show  up  at 
6:00  a.m.  The  Reds  went  in  one 
bus  and  the  Blues  in  another,  and 
the  Red  bus  played  German  mili¬ 
tary  songs. 

“A  war  game  is  really  a  psycho¬ 
logical  thing,  a  dramatic  exer¬ 
cise,”  Strassmann  says.  “People 
get  very  upset.” 


they  said,  ‘We  are  just  going  to  take 
them  to  the  cleaners.’  ” 

The  game  helped  the  company  real¬ 
ize  it  had  an  ace  in  the  deck  all  the 
time,  Strassmann  says.  “The  ace  was 
one  of  many  projects  pursued  on  an 
exploratory  basis  in  advance  engineer¬ 
ing.  The  game  moved  the  project  high 
on  the  list  of  priorities  and  accelerated 
deployment.  This  turned  out  to  be  a 
great  success  in  gaming  market  share.” 

This  particular  game  focused  on 
product  development  and  marketing 
and  not  directly  on  IT  issues,  but  the 
CIO  did  participate,  Strassmann  says. 
“The  CIO  gained  enormous  under- 


“The  secret  of  its 
great  power  lies  in 
the  existence  of  the 
enemy,  a  live, 
vigorous  enemy  in 
the  next  room 
waiting  feverishly 
to  take  advantage 
of  any  of  our 
mistakes,  ever 
ready  to  puncture 
any  visionary 
scheme,  to  haul  us 
down  to  earth.” 

CAPT.  WILLIAM 
MCCARTY  LITTLE, 
U.S.  NAVY,  1912 


Meanwhile,  Red  considers  a  rich  array  of 
nilitary  and  economic  options  -  both  overt 
and  covert  -  and  continues  to  keep  Blue 
iff  balance. 


By  Move  4,  the  Blue  Team  senses  that  it  isn’t  in  control  of  the  game  and  is 
confused  as  to  what  Red  is  up  to.  Blue  now  sees  the  struggle  as  mostly  an 
economic  one,  but  its  discovery  has  come  too  late. 


standing  of  the  marketing  issues,  and  I 
understand  he  subsequently  reallocat¬ 
ed  some  of  his  priorities,”  he  says. 

Jack  Reader,  a  senior  business  devel¬ 
opment  manager  at  Cisco  Systems  Inc., 
attended  the  Alidade  war  game  and 
says  the  concept  could  be  applied  in¬ 
ternally  for  long-range  planning.  “But 
no  one  here  has  bought  into  it  yet,”  he 
says.  “These  out-of-the  box  things  take 
a  while  to  find  the  right  sponsorship  at 
a  big  company  like  Cisco.” 

Reader  says  war  games  are  well  suit¬ 
ed  to  corporations  faced  with  making 
expensive  and  complicated  long-term 
technology  choices.  For  example,  he 
says,  a  CIO  at  a  small  bank  might  adopt 
the  role  of  a  Red  Team  against  a  larger 
competitor’s  Blue  Team  or,  if  the  CIO 
works  for  a  dominant  bank,  it  could 
play  the  role  of  Blue  against  smaller 
competitors  playing  Red. 

“What  would  you  do  if  your  CFO 
came  down  the  hall  and  told  you  your 
IT  budget  had  been  cut  80%?”  Reader 
says.  “As  it  turns  out,  there  are  some 
pretty  decent  strategies  when  you  are 
the  small  guy.  It’s  less  brute  force;  it’s 
about  being  smarter.” 

Alidade  likens  its  war  games  to 
“exploring  the  landscape.”  Now,  having 
played  the  game,  Frondorf  agrees.  “A 
war  game  forces  you  to  think  through 
the  scenario  and  create  what  I  call 
‘trail  heads,’  places  that  mark  pathways 
to  explore,”  he  says.  “I  like  to  say  that 
everything  interesting  happens  at  the 
boundaries.  In  IT,  that’s  especially 
true.”  045012 
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Finally  discovered  in  its  cyberattacks.  Red 
switches  to  untraceable  bioattacks  while 
simultaneously  building  defenses  against  Blue,j 
incursions  into  Red’s  region.  .  . 
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Think  Small 

Full-time  job  growth  continues  to  disappoint 
economists,  financial  analysts  and,  most  of 
alt.  job  seekers.  But  that’s  not  to  say  there 
isn’t  any  IT  contracting  work  out  there,  says 
Michael  Alter,  president  of  SurePayroll  Inc., 
a  Skokie,  lil.-based  payroll  outsourcing 
company. 

SurePayroH’s  client  base  comprises 
11,000  small  companies,  which  Alter  says 
are  hiring  IT  contractors  at  a  greater  rate 
than  ever  before.  For  the  2003  tax  year,  the 
number  of  Form  1099  wage  statements  - 
the  ones  issued  to  freelance  and  contract 
workers  -  rose  12%  among  SurePayroH’s . 


client  companies.  “A  lot  of  this  contracting 
is  for  IT,”  Alter  says.  “Small  businesses  are 
realizing  they  can  get  access  to  a  tremen¬ 
dous  number  of  highly  qualified  people  with 
specialized  skills  who  have  been  laid  off  by 
large  companies.  On  average,  small  com¬ 
panies  can  and  will  hire  10  programmers  to 
do  10  specialized  projects,  rather  than  a 
single  $100,000-a-year  programmer." 

For  the  month  of  February,  the  latest  pe¬ 
riod  for  which  statistics  are  available.  U.S. 
payrolls  outside  of  the  farm  sector  grew  by 
just  21,000  jobs  and  the  unemployment 
rate  held  steady  at  5.6%.  In  January, 
97,000  jobs  were  added  to  the  economy. 

-  Julia  King 


Vince  Canipitelli 


Title:  Managing  di¬ 
rector,  enterprise 
technology  audit 


A  ■  What  he  does:  Leads 
1 1 A  a  60-person  audit 
UfAM  focused  on 

identifying  and  man¬ 
aging  risks  associated  with  the  use  of 
IT  at  the  $2.4  billion  bank,  the  fourth- 
largest  in  the  country.  In  banking  and 
financial  services,  70%  to  80%  of  all 
risk  is  technology-related,  because  IT  is 
so  pervasive  in  the  business.  Campitelli 
believes  the  need  for  IT  risk  auditors  is 
growing  in  other  industries  as  well,  as 
all  companies  become  subject  to  new 
regulations,  such  as  the  Sarbanes- 
Oxley  Act  and  the  Patriot  Act. 


What  does  an  IT  risk  auditor  do  exactly?  It 

entails  looking  at  everything  in  the  technology  in¬ 
frastructure  -  networks,  operating  systems,  pro¬ 
gram  change  controls,  disaster  recovery,  informa¬ 
tion  security,  LANs,  WANs  and  voice  networks. 
You  assess  the  risks  of  all  of  these  technologies 
and  the  way  they  are  being  managed.  Then  you 
deveiop  a  three-year  audit  plan  under  which  you’ll 
look  at  every  component  in  the  architecture,  look¬ 
ing  at  the  high-risk  technologies  every  year  and 
the  medium-risk  items  every  other  year  or  third 


year.  It’s  like  sampling  New  York  City  restaurants. 
You  never  get  finished  because  by  the  end  of  the 
first  year,  you  have  changed  the  infrastructure  so 
much  that  you  have  to  sample  more  things. 

What  kind  of  skills  do  you  look  for  in  an  IT 
auditor?  These  are  hard-core  technology  people. 
They  understand  Unix,  firewalls,  networks  and 
operating  systems,  and  they  understand  them 
from  a  risk  and  control  perspective.  They  don’t 
need  to  be  Java  programmers,  but  they  need  to 
understand  howto  control  Java  programs  and 
best  practices  for  developing,  inventorying,  test¬ 
ing  and  rolling  out  changes. 

What’s  your  career  advice  for  an  IT  profes¬ 
sional  looking  to  move  into  IT  auditing?  The 

No.  1  quality  you  need  is  professional  skepticism. 
You  believe  everybody  and  trust  no  one.  It’s  also 
all  about  communication.  IT  auditors  are  focusing 
on  new  products,  new  services  and  new  projects. 
They  need  to  make  sure  the  CIO  understands  the 
risk  and  has  a  good  way  of  managing  it.  In  my 
opinion,  risk  and  understanding  risk  is  a  major 
black  hole.  What’s  needed  is  a  good  dialogue  be¬ 
tween  business  management,  financial  manage¬ 
ment.  IT  personnel  and  IT  auditors.  You  have  to 
come  up  with  a  common  language  that  all  people 
understand. 

How  do  you  do  that?  Have  a  good  training  cur¬ 
riculum  for  IT  people.  For  new  IT  hires,  we  build  in 
an  appreciation  for  risk  and  risk  assessment  con¬ 
trols  into  the  core  training.  The  other  thing  we  do 
is  get  senior  people  to  fully  support  it.  That  then 
significantly  reduces  the  challenge  because  brand- 
new  people  are  all  tor  it.  O  45276  -  Julia  King 


Double  Vision 

Business  and  IT  executives  don’t  see  eye  to  eye 
on  where  their  problems  lie. 


Which  IT  skill  sets  are  lacking  in  your 
IT  organization  to  the  point  where  it 
threatens  success  in  2004? 


r 

Business 

Speed  and  customer 
responsiveness 

33% 

Project  management 

33% 

Leadership/change 
management  skills 

30% 

25% 

Strategic  thinking 

35% 

22% 

Analytical  thinking 

25% 

17% 

Base:  818  senior  executive  decision  makers  at  North  American  companies: 
multiple  responses  allowed 


SOURCE  FORRESTER  RESEARCH  INC..  2004 


How  will  you  make  up  for  your 
shortfalls  of  IT  skill  sets  in  2004? 


now:  7% 


Won’t  fill  the  gaps:  3% 


Contractors  an 
consultants:  7% 


Base:  364  North  American  decision-makers 
(Percentages  don’t  total  100  due  to  rounding.) 

SOURCE:  FORRESTER  RESEARCH  INC..  2004 


to 

Numbers 

Crunch 

70% 

Percentage  of  IT  exec¬ 
utive  jobs  filled  via  peer 
networking. 

20'" 

Percentage  of  IT  exec¬ 
utive  jobs  found  by  directly 
contacting  company  exec¬ 
utives. 

4"'> 

Percentage  of  IT  exec¬ 
utive  jobs  found  through 
online  job  boards. 

lb" 

Percentage  of  IT  exec¬ 
utive  jobs  found  through 
company  Web  sites. 

35 

Minimum  number  of  hours 
a  full-time  job  seeker 
should  spend  searching 
each  week. 

2 

Minimum  number  of  week¬ 
ly  networking  meetings  to 
include  in  the  search. 
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BRIEFS 


Retailing  CIO  Now 
CTO  at  Newgistics 

Austin-based  Newgistics  Inc., 
which  helps  direct  retailers  han¬ 
dle  returned  merchandise,  last 
week  named  Joe  Phillips  as  chief 
technology  officer,  reporting  to 
the  CEO.  Phillips  previously  held 
CIO  positions  at  Blockbuster  Inc., 
Eckerd  Corp.  and  Rite  Aid  Corp. 
He  holds  a  bachelor’s  degree  in 
math  and  physical  science  from 
Troy  State  University. 


Unova  Taps  Taylor 
For  IT,  HR  Roles 

Unova  Inc.,  a  mobile  and  wireless 
systems  company  in  Everett, 
Wash.,  last  week  named  Sue  Tay¬ 
lor  as  CIO  and  vice  president  of 
human  resources.  Taylor  previ¬ 
ously  served  in  those  dual  roles  at 
Intermec  Technologies  Corp., 
which  is  Unova’s  automated  data 
systems  division.  Her  previous 
positions  at  Intermec  included  IT 
director  of  global  systems,  direc¬ 
tor  of  global  telecommunication 
and  client  services,  and  leader  of 
the  company’s  custom  software 
development.  Taylor  holds  a  mas¬ 
ter’s  degree  in  business  adminis¬ 
tration  from  the  University  of 
Iowa  and  a  bachelor’s  degree  in 
business  administration. 


Trash  Hauler 
Names  New  CIO 

Waste  Management  Inc.  in  Hous¬ 
ton  recently  named  Lynn  M.  Cad- 
dell  as  senior  vice  president  and 
CIO.  Caddell  will  succeed  the 
company’s  former  CIO,  Tom 
Smith,  who  retired  March  8.  Cad¬ 
dell  will  lead  a  group  of  more  than 
400  IT  professionals  and  report 
to  the  CEO.  Caddell  will  join  Waste 
Management  from  Yellow  Tech¬ 
nologies  Inc.  in  Overland  Park, 
Kan.,  where  she  has  served  as 
president  since  November  1999. 
Caddell  holds  a  bachelor’s  degree 
in  history  from  Jacksonville  Uni¬ 
versity  and  a  master’s  degree  in 
systems  engineering  from  the 
University  of  Arizona.  She  also 
completed  an  executive  education 
program  at  Harvard  University. 


NORBERT  J.  KUBILUS  ■  PEER  TO  PEERS 

The  Case  for 


To  LEASE  OR  NOT  TO  LEASE?  That’s 

the  question  facing  many  IT  executives 
today  as  they  grapple  with  justifying  the 
expense  of  technology  investments. 

All  indications  are  that  corporate  capital 
commitments  are  on  the  upswing,  especially  in  the 
area  of  IT  purchases.  With  interest  rates  rivaling  those 
of  the  1960s,  there’s  a  strong  temptation  to  buy  new 
hardware  and  software.  But  how  wise  is  it  to  purchase 


the  new  technology?  Rapid 
obsolescence  of  technology 
is  a  serious  problem,  espe¬ 
cially  for  companies  that 
have  a  strategic  need  to 
keep  pace  with  changing 
technology.  Such  large  cap¬ 
ital  expenditures  require  a 
major  cost-justification  ef¬ 
fort  and  make  it  harder  for 
companies  to  conserve 
working  capital. 

When  a  business  pur¬ 
chases  computer  equip¬ 
ment,  the  typical  financial 
assumption  is  that  the  equipment  has 
a  five-year  life  span.  It  becomes  a  capi¬ 
tal  asset  of  the  company  that  depreci¬ 
ates  in  value  over  the  five-year  period. 
After  three  years,  40%  of  the  equip¬ 
ment’s  value  is  still  on  the  company’s 
books,  but  there’s  little  technological 
value  left  in  it.  This  value  gap  is  the 
key  reason  for  interest  in  IT  leasing. 

Operating  leases  are  quite  attractive 
for  IT  because  they  treat  computer 
hardware  and  software  as  expense 
items,  like  a  company  does  for  com¬ 
modities  such  as  disks  and  printer  pa¬ 
per.  The  short-term  monthly  cost  of  IT 
leasing  is  always  significantly  less  than 
that  of  borrowing  the  money  to  buy 
the  equipment.  For  the  same  comput¬ 
ers  worth  the  same  amount,  over  the 
same  term  and  for  the  same  down  pay¬ 
ment,  monthly  lease  expenses  will  be 


30%  to  60%  lower  than 
loan  payments,  even  at  to¬ 
day’s  best  interest  rates. 

During  the  first  three  to 
five  years  of  the  equip¬ 
ment’s  life,  the  overall  cost 
of  leasing  compared  with 
buying  is  approximately 
the  same,  assuming  the  fi¬ 
nancing  deal  in  each  case 
runs  the  same  length  of 
time  and  the  company  sells 
the  equipment  at  the  end 
of  the  loan. 

Some  lease-vs.-buy  com¬ 
parisons  show  that  buying  costs  slight¬ 
ly  less  than  leasing  does,  but  this  is 
based  on  the  bad  assumption  that  pur¬ 
chased  equipment  will  return  full  mar¬ 
ket  value  if  it’s  sold  or  traded  at  the 
end  of  the  loan. 

While  there  is  a  secondary  market 
for  used  computer  equipment  —  just 
look  on  eBay  —  it  takes  time  and  effort 
to  obtain  full  market  value  when  dis¬ 
posing  of  computers  by  the  hundreds 
or  thousands.  The  hassles  of  manag¬ 
ing  obsolescence  and  disposal  will 
make  leasing  seem  a  lot  more 
favorable.  The  leasing  company 
assumes  both  risks. 

The  CIO  should  look  for  a  properly 
structured  leasing  program  that  offers 
more  than  just  cash-flow  benefits  and 
technology  risk  avoidance.  A  key  fea¬ 
ture  of  such  a  program  is  effective  as¬ 


i  NORBERT  JI.  KUBILUS  IS  a  ^ 
I  CIO  partner  at  Tatum  ; 
:  Partners  in  San  Diego.  ; 
i  He  can  be  contacted  at  ? 
;  Norfaert.Kubilus®  ) 

^  tatuinfiaitnefs.com.  i 


set  management.  The  leasing  company 
owns  the  equipment  and  is  responsi¬ 
ble  for  maintaining  the  physical  inven¬ 
tory  for  each  piece  of  equipment  on 
lease,  including  a  description,  serial 
number,  asset  tag  number,  acceptance 
date,  installed  location  and  lease  ter¬ 
mination  date.  It  also  collects  and  pays 
sales  taxes,  use  taxes  and/or  property 
taxes  based  on  where  the  equipment 
is  located. 

Leasing  programs  can  be  very  cre¬ 
ative  and  customized.  A  typical  pro¬ 
gram  involves  a  master  lease  with 
schedules  that  permit  timed  acquisi¬ 
tion  of  equipment  from  multiple  ven¬ 
dors.  The  phased  acquisition  could  be 
especially  useful  for,  say,  a  gradual 
rollout  of  point-of-sale  systems  at  hun¬ 
dreds  of  outlets  around  the  country. 
Some  leasing  programs  also  incorpo¬ 
rate  a  lease  line  of  credit  that  lets  the 
CIO  add  hardware  and  software  as 
needed  and  incorporate  them  into 
the  program. 

From  a  return-on-investment  per¬ 
spective,  the  CIO  can  also  use  a  mas¬ 
ter  lease  to  fix  per-seat  costs  on  an  on¬ 
going  basis.  This  allows  the  CIO  to 
keep  the  company  at  an  appropriate 
level  of  technology  for  a  predictable 
monthly  cost  that  can  be  budgeted  in 
advance.  Also,  services  can  be  bundled 
into  monthly  lease  payments.  The 
master  lease  can  cover  upfront  con¬ 
sulting  and  training  costs,  as  well 
as  those  for  monthly  support  and 
maintenance. 

For  CIOs  who  are  convinced  that 
hardware  and  software  are  commodi¬ 
ties  rather  than  capital  assets,  leasing 
makes  more  sense  than  ever.  And  the 
flexible  and  customized  leasing  op¬ 
tions  available  today  make  it  an  even 
more  attractive  alternative.  O  45412 


OFor  more  columns  and  links  to  our  archives,  go  to 
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Programmers  &  Software 
Engineers:  Analyze,  design, 
deveiop,  test  &  impiement  spe- 
ciaiized  apps.  in  (a)  Business 
Objects  &  rel.  product  suite, 
Web  Intelligence,  Imformatica, 
PowerMart,  ASP,  VB,  Crystai 
Reports,  Oracle  8i  &  rel.  tools; 
(b)  PeopleSoft  Supply  Chain 
Mgmt.,  Financial  &  HRMS, 
Oracle  &  rel.  tech.;  (c)  SAS 
Suite,  Teradata,  Sybase, 
Informix,  Oracie  9i  &  rei.  tech.; 
(d)  WebSphere,  Peoplesoft 
HRMS,  Oracie  &  rei.  tools,  Java 
&  rel.  tech.;  (e)  MQ  series, 
WebSphere,  XML,  DB2,  Apache 
Server,  Ciearcase,  Java  &  rel. 
tech.;  (f)  Vitria  Businessware, 
VisualCaf§,  Weblogic,  C++, 
Sybase,  Java  &  rel.  tech.;  (g) 
Oracle,  ADSM,  SQL,  Ablnitio, 
Sybase,  Informix,  Rational 
Ciearcase  and  rel.  tools;  (h) 
PeriphonicsProducer  &  other 
Periphonics  products  for  interac¬ 
tive  voice  response  systems, 
sees,  C/C++,  Oracle  8i  & 
Genesys  product  suite;  (i)  SAP- 
SEM,  SAP  R/3,  SAP  BW, 
ABAP/4,  SAP  (SD,  MM,  PP)  & 
rel.  tech;  (j)  Oracle,  SQL  Server, 
Cobol,  CICS,  DB2,  IMSDB/DC, 
TSL  &  rel.  tech.  Send  resume  to 
Software  Technical  Services, 
Inc.,  HR,  2021  Fox  Valley  Drive 
SW,  Rochester,  MN  55902, 
identifying  interested  position(s). 
EOE 


Software  Engineers, 
Database  Administrators, 
Network/Systems  Administrators 

Employer:  NaviSite,  Inc 
Date  Posted:  03-11-2004 
Job  Description: 

COMPUTER  —  NaviSite's  repu¬ 
tation  for  innovative  managed 
hosting  and  development  is 
fueled  by  the  talent  of  our 
employees.  We're  looking  for 
skilled,  dynamic  professionals 
who  are  up  to  the  challenge  of 
upholding  our  reputation  for 
great  customer  service  and  in¬ 
novative,  on-time  solutions  to 
customer  needs.  NaviSite,  Inc. 
has  openings  in  occupations 
including;  Software  Engineer 
(systems  and  applications)  JOB 
CODE:  SE3906,  Database  Ad¬ 
ministrator  JOB  CODE:  DA- 
4906,  and  Network/Systems  Ad¬ 
ministrator  JOB  CODE:  SA5906. 
Jobsites  include  Andover,  MA; 
Syracuse,  NY;  Vienna,  VA;  San 
Jose,  CA;  and  San  Francisco, 
CA. 

Cover  letter  and  resume  to 
NaviSite,  Inc.  jnazarian@navis- 
ite.com. 

NaviSite,  Inc 
400  Minuteman  Road 
Andover,  MA  01810 
Attn:  Recruiting 
Requirements:  PLEASE  IN¬ 
CLUDE  JOB  CODE  IN  SUB¬ 
JECT  LINE  OF  E-MAIL. 


COMPUTER  PROFESSION¬ 
ALS:  Radiant  Systems,  Inc.  a 
Nationwide  Technology  provider 
located  in  NJ,CT,TX  &  FL  req 
Professionals  w/  Hardware  SJor 
Software  skills  IncI:  C.C++. 
Java,  JavaScript,  XML,  UML, 
Perl,  HTML,  SQL,  Pro*C, 
VB,PB,  VC++,  MFC,  SDK, 
Gupta-SQL,  Informix, Crystal 
Reports,  Sybase,  Dev  2000, 
Lotus  Notes,  Unix,  Win 
NT/95/XP,  RTOS,  Sun  OS,  Help 
Desk/PC-Support,  SAP,  RI2- 
R/3,  ABAP/4,  SAP  Scripts, 
Peoplesoft,  IDMS,  AS/400, 
COBOUCICS/DB2,  MVS, 
RPG/400,  SQA,  Win/Load 
Runner,  SNMP,  CORBA,  ASP, 
Active-X,  DTM/TDMA,  FDMA, 
Routers,  DSP/ATM,  FRAME 
RELAY,  TCP/IP,  ISDN,  DCOM, 
COM,  PL/1,  SAS,  Vx-Works, 
VHDL,  SONET/SDH,  SNMP,  HP 
OpenView,  Pro]  Mgr,  Tech 
Writers  Candidates  w/a  BS(or 
equiv)  &  2yr5  exp.  as  P/A  and/or 
MS  (or  equiv)  &  lyr  exp.  as  S/E. 
Travel  &  reloc  .req.  to  anywhere 
in  USA  as  assigned.  Excel. 
Benefits.  E-Mail:  radiants@radi- 
ants.com  Attn:  H.R.  Dept.  109-A 
Corporate  Blvd.,  S.  Ptainfield. 
NJ  07080. 


Programmers,  Software  Engin¬ 
eers  &  Network/System  Adm¬ 
inistrators:  Analyze,  design, 
develop  &  test  apps.  in  (1)  MS 
tech.  including  ASP.NET, 
VB.NET,  C#  &  related  .NET 
tech.,  XML,  HTML,  ASP, 
VB/Java  Script,  COM/DCOM, 
SQL  Server,  Crystal  Reports, 
Visual  ActiveX,  BizTalk  &  rel. 
tools;  (2)  SAP  r/3,  ABAP/  4  pro¬ 
gramming  in  SAP  (BW,  SD,  MM, 
PP  &  FI/CO)  modules,  SAP 
Scripts,  EDI,  Mercator,  Web¬ 
Sphere,  DB2,  Java  &  rel.  tech.; 
(3)  EDI,  HIPAA,  Cobol,  Clarify, 
SQL  Server,  Sybase,  VB,  DB2, 
Oracle,  Java,  VB  &  rel.  tech.;  (4) 
AB-lnitio,  Teradata,  Clarify, 
Oracle,  Toad,  Unix  Shell/Perl 
Scripts  &  rel.  tech.;  (5) 
BroadVision,  Oracle,  JDBC,  J- 
Builder,  Java  &  rel.  tech., 
Netscape  Enterprise,  Weblogic 
&  Jrun  Servers,  Net  Beans, 
Struts  &  Velocity;  (6)  System 
design,  install,  network  &  admin¬ 
ister  AIX,  Solaris  &  NT  based 
servers:  (a)  Apache  Web, 
Websphere  App.,  Veritas 
NetBackup,  Oracle,  MQSeries, 
iPlanet,  Bourne,  Kom,  TCP/IP, 
DB2,  Java,  C,  C++,  BigBrother, 
HumminBird,  Netview  and  relat¬ 
ed  tech.;  (b)  TCP/IP,  SNMP  & 
other  network  protocols,  DHCP, 
DNS,  VPN,  Exchange,  SMS, 
Microsoft  Windows/Sun/Linux 
OS  Versions,  Compaq,  Dell,  IBM 
Enterprise/Proxy  Terminal 
Servers  -  [CCNP  &  MCSE 
required);  Send  resume  to  HR, 
1278  Killian  Knoll  Circle,  Lilbum, 
GA  30047,  identifying  interested 
position(s).  EOE 


MAXIL  Technology  Solutions  Inc 
is  seeking  a  Full  time  Program¬ 
mer  Analyst  who  has  Analyze, 
design,  and  developed  applica¬ 
tions  on  the  legacy  based  sys¬ 
tems,  3-4  years  of  experience  in 
AS400  using  Cobol/400,  RPG/ 
400,  CU400,  QRY/400,  SQL/ 
400  SDA,  DFU,  RLU  and  AL- 
DON  Change  Management 
System  and  databases  like 
DB2/400,  DB2  and  UDB.  Should 
have  extensive  knowledge  in 
design/development  using  CO- 
BOL/400,  CL/400  as  control  lan¬ 
guage  using  OS/400  as  operat¬ 
ing  system.  Should  have  3  years 
experience  on  Wheatley  Insur¬ 
ance  (WINS)  application  on 
AS/400.  Should  have  min  1-year 
experience  on  Mainframes  using 
APS-COBOL,  VS  COBOLII  and 
JCL.  Exposure  towards  web 
tech  like  Java,  JSP,  Servlets  and 
HTML  preferred.  Education  & 
Experience:  Bachelors/  Masters 
in  Science/Engineering  with  3-5 
years  of  Industrial  Experience. 
Experience  in  Insurance  appli¬ 
cations  using  WINS,  COBOL/ 
400  and  CL/400  strongly 
desired.  Respond  by  email  to 
resumes@maxiltechnology.com 
/877-853-6009(F). 


Software  Developer  (3  FT  posi¬ 
tions)  to  design  browser  based 
software  applns.;  user  interac¬ 
tion;  reqs.  defn.;  project  plans; 
program  specs.,  ctxle,  unit  inte¬ 
gration,  test  &  create  tech, 
docs.;  design/  develop  database 
tables,  stored  procs.  &  triggers 
in  SQL  Server  2000;  database 
schema,  site  arch.,  site  map  in 
MS  Visio;  document  database 
objects.  Ul  element;  use  object 
oriented  features  inheritance, 
overloading,  polymorphism  & 
interfaces  to  develop  core 
framework  classes;  develop 
XML  docs.  &  cust.  Svc.  for 
maint.  Develop  web-based  n-tier 
applns.  using  ASP.NET,  Visual 
Studio.NET,  ADO.NET,  ASP,  VB 
6.0,  Oracle  8i,  MS-Access  2000, 
C#,  SQL  2000,  ODBC,  JAVA¬ 
SCRIPT,  VB.NET,  HTML,  D- 
HTML,  on  windows  95/9^NT/ 
2000/XP.  BS  in  Business/Com¬ 
puter  Science  or  equivalent  +  2 
yr.  exp.  in  job  duties  OR  2  yrs. 
software  development  experi¬ 
ence  in  ASP.NET.  C#,  VB.NET, 
COM  +,  XML,  SQL  2000.  Em¬ 
ployer  will  accept  5  yrs.  software 
exp  in  lieu  of  BS.  Comp,  sala¬ 
ries.  Apply:  Intermark,  1800 
InternI  Park  Dr.,  tt  500, 
Birmingham,  AL  35243  with 
proof  of  perm,  w/k  authzn. 


Senior  Business  Systems  Ana¬ 
lyst  to  analyze  complex  financial 
business  systems  and  subsys¬ 
tems  installed  in  an  IBM  DB/DB2 
or  other  similar  Oracle  or  Sy¬ 
base  environment  using  devel¬ 
opment  tools  such  as  Powerbuil- 
der,  MQ  Series,  CICS,  VSAM, 
PVeS,  UNIX  Scripts,  Visio, 
PFC,  VB  and  PB  Profiler  to 
insure  that  systems  applications, 
modules  and  subsystems  are 
property  integrated  with  client 
servers  and  web  based  applica¬ 
tions  and  are  capable  of  trans¬ 
mitting  data  in  various  formats 
based  on  end  user's  require¬ 
ments  in  a  real  time  environ¬ 
ment.  Defines  and/or  documents 
financial  business  systems  re¬ 
quirements  and  writes  functional 
and  technical  specifications. 
Implements  and  supports  sys¬ 
tems  applications  in  a  client 
server/web  application  environ¬ 
ment.  Requires  Bachelor's  De¬ 
gree  in  Computer  Science  and 
two  years  direct  experience.  Job 
location:  Tampa,  Florida.  Send 
resumes  only,  no  calls,  to: 
Cheryl  Franz,  Human  Resourc¬ 
es  Officer,  Household,  Attn: 
International  Human  Resources, 
One  HSBC  Center,  25/F, 
Buffalo,  New  York  14203. 


OPERATIONS  RESEARCH 
SPECIALIST  wanted  by  a  Car 
Rental  co.  in  Parsippany,  NJ. 
Working  with  client  management 
to  examine  existing  methods, 
procedures  and  complex  prob¬ 
lems  to  determine  where 
Operations  Research  tec- 
qniques  can  aid  decision-mak¬ 
ing.  Must  have  a  Master's 
degree  in  Math,  Indust,  Eng., 
Statistics  Operations  Research 
or  related  field.  Must  also  have 
specialized  knowledge  of  vari¬ 
ous  computing  platforms,  specif¬ 
ically  MVS/TSO/JCL/UNIX/SAS/ 
C/Fortran/Sybase/Power¬ 
Builder/  CPLEX,  database  prod¬ 
ucts  and  PC  software  tools.  In 
lieu  of  a  Master's  degree,  we  will 
accept  a  Bachelor's  degree  plus 
two  (2)  yrs.  progressive  exp.  in 
operations  research,  statistical 
methods  and  scientific  program¬ 
ming  skills. 

Please  send  resume  to: 

Cendant  Car  Rental  Group,  Inc 
Human  Resources,  Staffing 
6  Sylvan  Way 

Parsippany,  New  Jersey  07054. 
Fax#  973^96-7584 
cendant.jobsl  3@cendant.com 
Ref#OR-1. 


System  Administrators  req'd  for 
Chicago,  IL  office.  Design  & 
implement  Firewall  Archi¬ 
tectures.  WANs,  LANs,  ATM, 
Fiber  SAN,  TCP/IP  networks, 
DNS,  SOCKS,  Cisco  PIX, 
CISCO  Routers  and  Foundry 
Load  Balancing;Manage  system 
process  using  C++,  Multithread 
works,  Windows  SDK,  Shell. 
Perl  and  TCL/TK.  Bachelors  or 
equivalent  req'd  in  Computers, 
Engineering,  Math  or  any  relat¬ 
ed  field  of  study  +  2  yrs  of  relat¬ 
ed  exp.  40  hrs/wk.  Must  have 
legal  1  authority  to  work  perma¬ 
nently  in  the  U.S.  Contact  HR 
Manager,  Aster  Telesolutions, 
Inc.,  37053,  Cherry  St,  Ste  103 
Newark,  CA  94560 


Programmer  Analysts  for  Dallas, 
TX  office.  Design  &  Develop 
software  applications  using 
Oracle,  Erwin,  XML,  UML,  C++, 
Interwoven,  Coolgen,  Clear- 
Case,  ClearOuesL  PVCS,  UNIX; 
Bachelors  reqd  in  Computers, 
Engineering.  Math  or  any  relat¬ 
ed  field  of  study  +  2  yrs  of  relat¬ 
ed  exp.  40  hrs/wk.  Must  have 
proof  of  legal  authority  to  work 
permanently  in  the  U.S.  Send 
resume  to  HR  Manager, 
Redsalsa  Technologies,  Inc. 
14001  .N.  Dallas,  Parkway,  #  550 
Dallas.  TX  75240 


RESEARCH  PROGRAMMER 
University  of  Illinois  at  Chicago 

Administer  UNIX,  Windows  NT 
and  other  servers  used  for 
teaching;  programming;  provide 
instructional  technology  consult¬ 
ing  to  faculty;  help  develop  tech¬ 
nology-based  courses  and  teach 
computer  seminars  and  work¬ 
shops.  The  applicant  should 
have  a  Bachelor's  Degree  in 
Computer  Science  or  related 
field,  and  have  teaching  experi¬ 
ence.  The  successful  candidate 
should  have  two  years  of  com¬ 
bined  experience  in  Windows 
NT,  and  UNIX  system  adminis¬ 
tration,  Webmaster  experience, 
programming  in  HTML,  Perl  and 
C,  and  have  experience  in 
teaching,  course  development 
and  in  using  computer  and 
Internet  technology  in  education. 
Working  knowledge  of  Apache, 
IIS,  Tomcat,  Oracle,  PL/SQL, 
Transact-SQL  and  multimedia 
authoring  tools  are  a  plus. 
Please  submit  resume  by 
4/23/04  to  Mint  Simagrai, 
Academic  Computing  and 
Communications  Center,  1 940 
W.  Taylor,  Room  124  (M/C  135), 
Chicago,  IL  60612.  UlC  is  an 
Affirmative  Action/Equal  Oppor¬ 
tunity  Employer. 


IT  Business  Manager,  Wachovia 
Corp.  Charlotte,  NC.  Develop 
and  implement  IT  business  solu¬ 
tions  for  various  business  units 
across  the  bank.  Responsible 
for  overseeing  several  IT  pro¬ 
jects  simultaneously.  Reqs.  BA 
in  Bus.  Admin.  &  2  yrs  exp.  in 
the  pos.  offered  or  as  a  Systems 
Architect  or  Solutions  Architect. 
The  2  yrs  must  incl.  work 
deploying  internet  appis.  in  the 
financial  services  industry,  incl. 
but  not  limited  to  secure  online 
appl.  and  defining  &  delivering 
segment  based  portal  &  appl. 
strategies  w/  a  strong  focus  on 
the  small  business  customer 
segment.  40hrs/wk.  Send  res¬ 
ume  &  cvr.  Itr.  to  Jane  Higgins, 
401  S.  Tryon  Street,  NC  0958, 
Charlotte,  NC  28288.  No  phone 
calls  please. 


Trading  Systems  Developer, 
Charlotte.  NC,  Wachovia  Corp. 
Develop  &  write  computer  pro¬ 
grams  for  fixed  income  and  risk 
mgmt.  systems.  Reqs.  MA  in 
Computer  Science  &  2  yrs  exp. 
in  pos.  offered  or  as  an  Analyst 
Developer  or  Software  Engineer. 
The  2  yrs  must  incl.  work  w/ 
trade  processing  concepts  rel.  to 
electronic,  manual  trading,  STP 
and  settlements  &  must  incl. 
designing  and  developing  soft¬ 
ware  appis.  for  fixed  income 
trading  using  C++,  Java  Perl, 
RV  Messaging,  Rouge  Wave, 
Windows  NT,  Unix,  Sybase  in  a 
distributed  computing  environ¬ 
ment.  M-F,  40hrs/wk,  Send  res¬ 
ume  and  cover  letter  to  Edward 
J.  Hayes,  Wachovia  Corp.,  401 
S.  Tryon  Street,  NC0958, 
Charlotte,  NC  28288-0958.  No 
phone  calls. 


PROG  ANALYST  - 
ORACLE  FINANCIALS 

Dvip  customized  applns  to 
Oracle  Financials  software 
package.  Upgrade,  patch 
releases  &  test  to  client  specs. 
Integrate  with  Customer 
Relationship  Mgmt  applns  like 
Siebel.  MS  degree  in  Comp. 
Sci.,  MIS  or  Comp.  Engnrg  +  5 
yrs  exp.  in  job  offered  or  in 
Software  Engnrg  w/Oracle 
Financials  reqd.  40  hrs/wk,  OT 
as  reqd,  8am  -  5pm.  $66,730/yr. 
Qualified  applicants  please  sub¬ 
mit  resume  to  Manager,  Butler 
County  CareerLink,  Pullman 
Commerce  Center,  112 
Hollywood  Drive.  Suite  101, 
Butler,  PA  16001-5699.  Please 
refer  to  Job  Order  No  WEB 
400015. 


IT  Technical  Lead,  Wachovia 
Corp.  Charlotte,  NC.  Lead  IT 
team  that  develops,  creates,  and 
modifies  computer  applications. 
Oversee  budget  preparation  and 
track  IT  project  expenses. 
Reqs.  MA  in  Computer  Science, 
Prod,  or  Mechanical  Eng.  and  2 
years  of  exp.  in  the  pos.  offered 
or  as  a  Software  Engineer  or 
Computer  Programmer.  The  2 
years  must  incl.  working  w/ 
check  imaging  and  online  bank¬ 
ing  systems  using  internet  tech¬ 
nologies  such  as  JAVA, 
WebSphere,  iPlanet  and  UNIX 
and  must  have  included  manag¬ 
ing  an  IT  projects  with  a  budget 
in  excess  of  $1  million. 
40hrs/wk,  Send  resume  &  cvr. 
Itr.  to  Jane  Higgins,  401  S.  Tryon 
Street,  NC  0958,  Charlotte,  NC 
28288.  No  phone  calls  please. 


SENIOR  SOFTWARE  ENGIN¬ 
EER  to  design,  develop  and  test 
various  application  so^are  and 
web-based  GUIs  for  the  telecom¬ 
munication  industry  using  Object 
Oriented  programming  tech¬ 
niques,  Java,  Servlets,  Applet, 
EJB,  JSP,  J2EE,  Design  Patems, 
C,  C++,  HTML,  XML,  UML,  Java¬ 
Script,  SQL,  VC++  and  COM/ 
DCOM  under  Windows  NT/95/98 
/2000/XP,  HP-UX,  Sun  Solaris 
and  Linux  operating  systems. 
Require:  B.S.  degree  in  Comput¬ 
er  Science/Engineering,  or  a 
closely  related  field  with  5  yrs  of 
progressively  responsible  exp  in 
the  job  offered  or  as  a  Program¬ 
mer/Analyst  or  Programmer.  Ex¬ 
tensive  travel  on  assignment  to 
various  client  sites  within  the 
U.S.  is  required.  Competitive 
salary  offered.  Apply  by  resume 
to:  Eduardo  Santos,  Custom 
Software  Solutions,  Inc.,  1002 
Williamson  Lane,  Snellville,  GA 
30078;  Attn:  Job  NH. 


PROGRAMMER:  Convert  to 
flow  charts  for  coding:  devel¬ 
op  &  write  programs:  program 
&  maintain  websites.  Req.: 
Bachelor's  In  IT.  (employer 
will  accept  foreign  degree 
equiv.  or  equiv.  in  exp.  or  any 
comb,  of  edu./exp.)  Resume; 
Atlanta  Retailers  Assoc.  LLC, 
3300  Buckeye  Rd.  #  698, 
Atlanta,  GA  30341. 


Software  Engineer:  Dsgn.  & 
devip.  supply  chain  ntwrk.  soft. 
Plan  &  dsgn.  SAP  R/3  soft,  w/ 
APOimplem.  to  optimize  cost  & 
profit  based  supply  chain  syst. 
consid.  asset  utiliz.  &  inv.  constr. 
Invivs.  demand  plan.  &  SNP 
interf.,  creation  of  plan,  areas  & 
books,  SNP  build  plan  gener., 
interf.  of  master  data  &  CIF  to 
R/3,  live  cache  &  datab.  &  soft, 
config.  Work  could  be  in  unan¬ 
tic.  Iocs,  across  the  U.S.  Req. 
are  Bach.  Deg.  in  Comp.  Sci.  or 
Comp.  Eng.+  2  yrs.  exp.  40 
hrs./wk.  $80,000/yr.  Submit 
resume  to  the  Career  Link  at 
1855  New  Hope  St.,  Norristown, 
PA  19401  and  ref.  job  order 
#WEB401097. 


Software  Engineers  needed 
to  dvIp,  test,  impimnt  s/ware 
applies  using  Java,  J2EE, 
EJB,  C++,  DHTML,  XML, 
XSLT,  Struts,  JSP,  Shell 
Scripting,  Oracle,  TCP/IP, 
SONET,  SS7,  X/Motif, 
SllkTest,  WInRunner,  &  Purify 
on  Windows  &  UNIX.  Send 
resume  to:  Global  Consul¬ 
tants,  Attn:  HIreme,  8800 
Grand  Oaks  Clr#100,  Tampa, 
FL  33637, 


Software  Engineer  for  Tewks¬ 
bury,  MA  based  developer  of 
software  products  for  J2EE  web 
applications,  portlets  and  web 
services.  Requires  Bachelor  of 
Science  degree  in  Computer 
Science,  Computer  Engineering 
or  related  area  and  one  (1)  year 
experience  in  object  oriented 
design  of  web-based  software 
applications  using  Java,  JSP, 
XML  and  relational  databases 
including  configuring  production 
deployment  environments,  con¬ 
ducting  software  requirement 
analysis,  performing  unit  testing, 
developing  software  QA 
processes,  creating  product  and 
technical  documentation  and 
providing  customer  support.  The 
position  is  located  in  Tewksbury, 
MA  with  15%  travel.  Send 
resume  to  Bowstreet,  Inc., 
Human  Resources,  Ad  Code: 
0492,  200  Ames  Pond  Drive, 
Tewksbury,  MA  01876. 


Systems  Software  Engineer: 
Responsible  for  research, 
design,  develop  &  test  oper¬ 
ating  systems  software. 
Translate  clients'  require¬ 
ments  into  Urdu  language 
for  overseas  engineers.  Re¬ 
quire:  BS  in  Computer 
Science/Engineering  +  2 
years  of  exp.  Send  resume 
to:  Memory4Less,  Inc.,  2622 
W.  Lincoln  Ave.,  #104, 
Anaheim,  CA  92801,  Attn: 
HR  Mgr  or  fax  to:  714-821- 
3361. 


Programmer  Analyst  needed  w/ 
exp  in  s/w  applications  using  SQL 
queries,  VC++.  C#  &  ASP.NET. 
Work  on  XML  based  EDI  applica¬ 
tions  using  Java,  J2EE,  XSL,  SQL 
Server.  ADO.NET  &  .NET  technol¬ 
ogies  on  Unix  &  Windows  plat¬ 
forms. 

Programmer  Analyst  w/exp  in  mul¬ 
tithreaded  programs  using  ASP, 
IIS,C++,  VC++,  MFC,  Win32  SDK, 
ODBC,  GUI,  WinSock,  SQL  Ser¬ 
ver.  Windows  NT/2000  &  frontend 
tools. 

Programmer  Analyst  w/exp  in  us¬ 
ing  C++,  Java,  HTML,  XSL/XML, 
Java  Script,  PL/SQL,  Windows  & 
Unix.  Integrate  legacy  appl.  using 
VITRIA  &  interface  with  Oracle. 
Mail  resumes  to:  Compu-lnfo,  410 
Kingston  Road,  #2A,  West 
Kingston,  Rl  02892. 


K&M  Softech  is  looking  for  pro¬ 
grammer/system  system,  soft¬ 
ware/project  engineers  or  IT  pro¬ 
fessionals.  Both  entry  &  experi¬ 
enced  levels  needed.  Some 
positions  require  travel.  Skills  in 
C/++,  VB,  Java,  Oracle,  SAP, 
SQL  are  plus.  Please  send 
resumes  to  Recruit@kmsof 
tech.com.  EOE. 

Software  engineers/system  ana¬ 
lysts  wanted  by  ASI  DataMyte. 
Candidates  must  have  BS  with 
min  one-yr  exp  to  develop  GUI 
and  server  database  systems. 
Skills  in  VC++,  Java,  VB,  Oracle 
preferred.  We  offer  competitive 
wage  with  full  benefit.  Apply  at 
hr@asidatamvte.com.  EOE.  No 
calls. 


Project  Leader.  Coming  Incor¬ 
porated  in  Coming,  NY,  seeks 
Project  Leader  to  develop  and 
support  information  technology, 
business,  manufacturing  and 
quality  systems  for  science  and 
technology  organization.  Re¬ 
quires  Bachelor's  degree  in  Infor¬ 
mation  Management,  Computer 
Science.  Engineering  or  related 
field  and  relevant  experience 
including  management  of  IT- 
related  projects,  programming 
languages  such  as  Java,  C.  C++, 
Visual  Basic  of  HTML  and  appli¬ 
cation  development  using  rela¬ 
tional  databases  such  as  Oracle. 
MS  SQL  Server  or  MS  /kccess. 
To  apply  please  forward  your 
resume  to  stoneer@coming.com 
and  reference  opening  9543. 
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Senior  Developers  needed. 
Seeking  qualified  candidates 
possessing  MS  or  equiv.  and/or 
rel.  work  exp.  Degree  must 
include  coursework  in  Object 
Oriented  Programming  and 
Modem  Operating  Systems  or 
related.  Job  duties  include: 
Research,  design  and  develop 
software  systems.  Analyze  and 
develop  feasible  computer  solu¬ 
tions  for  business  propositions 
and  operational  needs  of  clients 
using  modem  operating  sys¬ 
tems.  Troubleshoot  and  debug 
systems.  Travel  to  set  up  soft¬ 
ware  systems  and  train  users. 
Work  w/  J2EE.  Webservices, 
Java.  C++.  ASP  and  Perl.  JOB 
IS  LOCATED  IN  SALT  LAKE 
CITY.  LIT.  Mail  res.,  trans,  ref. 
&  sal.  reqs  to:  SBI  Group,  Inc.. 
410  Townsend  Street.  San 
Francisco,  CA  94107. 


Project  Leader  (Colorado) 
Understand  client  requirements 
to  develop,  test,  implement,  and 
maintain  business  application 
systems  using  VSCOBOL  11. 
COBOL,  JCL.  SAS,  VSAM. 
DB2,  CICS,  SPUFI.  QMF, 
PROEDIT,  PANVALET,  PLAT¬ 
INUM.  XPEDITER,  FILE  AID.  40 
hrs  per  week,  8:00  a  m.  -  5:00 
p.m,,  $57,450  per  year.  B.S.  in 
Computer,  Engg  or  related  field 
req'd,  plus  5  yrs  experience  on 
the  job,  or  5  yrs  experience  in 
any  occupation  involving  soft¬ 
ware  engineering  or  similar 
duties.  Application  is  by  resume 
only.  Send  resume  to  Workforce 
Development  Programs,  P.O. 
Box  46547,  Denver,  CO  80202, 
and  refer  to  order  number 
C05071407. 


itcareers.com 
can  solve  the 
labyrinth  of 
job  hunting  by 
matching  the 
right  IT  skills 
with  the  right 
IT  position. 
Find  out  more 
at: 

www.itcareers.com 


Project  Manager.  Alpharetta; 
Manage  deployment  process, 
if>d.  design,  development,  coor¬ 
dination  &  maintenance  of  data 
management  system  for  collec¬ 
tion  of  field  data  from  remote 
locations  &  for  client  billing  pur¬ 
poses;  coordinate  data  to  be 
accessed  by  clients  via  corpo¬ 
rate  website  &  24  -hr  automated 
account  inquiries;  manage  inte¬ 
gration  of  recording  equipment 
into  client  locations;  document 
technical  requirements  neces¬ 
sary  for  redesign  of  systems. 
Lead  small  internal  development 
team.  Req:  Bachelors  (or  foreign 
equiv)  in  any  field  +  4  yrs  in  job 
or  as  Project  Manager  -  Data 
Management  Systems  (any 
industry).  Send  resume  to  US 
Energy,  1455  Alderman  Drive, 
Bldg  100,  Alpharetta,  GA  30005. 

F/T  Instructional  Technology 
Database  Support  Developer. 
Responsible  for  assisting  faculty 
in  using  available  techr>ology  to 
enhance  teaching  and  learning 
using  Tango  4.5  middleware  and 
Dreamweaver.  Maintain  and 
extend  currently  available  learn¬ 
ing  technologies  and  promote 
their  wide  and  effective  use. 
Design,  create,  develop  and 
maintain  customized  database- 
driven  information  and  decision 
support  systems  and  solutions 
using  4D.  ERDs,  and  Relational 
Database  Management  System. 
Develop  and  maintain  online 
learning  services.  Server  main¬ 
tenance  and  administration. 
Customize  database-driven  sys¬ 
tems  development  using 
Normalization  and  Banner. 
Educational  background  must 
have  included  the  above  refer¬ 
enced  computer  skills.  Must 
have  a  Master's  in  Management 
Information  Systems  or  related 
field.  Salary:  Competitive.  Send 
resumes  to;  Dr.  Dwight  Call.  GA 
College  &  State  Univ.,  CBX  049. 
Milledgeville.  GA31061. 

Biostatlstician 

The  Medical  College  of  Wiscon¬ 
sin  is  seeking  a  Biosfatistician. 
The  biostatistician  position  is 
responsible  for  providing  statisti¬ 
cal  analysis  and  programming 
support  for  research  projects. 
Qualified  candidates  must  pos¬ 
sess  a  Master's  degree  in 
Statistics,  Computer  Science, 
Computing  or  Bioinformatics,  as 
well  as  one  year  of  prior  work 
experience  as  a  computer  soft¬ 
ware  professional  and  knowl¬ 
edge  of  bioinfomiatics  analysis 
tools,  UNIX,  Matlab,  C++,  FOR- 
TFLAN,  and  statistical  analysis 
packages  SAS,  S-Plus  or  SYS- 
TAT.  Interested  applicants 
please  provide  a  resume  and  a 
cover  letter  with  salary  require¬ 
ments  to:  Medical  College  of 
Wisconsin,  Attn:  Employment 
Office  -  JMC0322,  8701  Water- 
town  Plank  Rd.,  Milwaukee,  Wl 
53226,  Fax:  414-456-6502. 

Senior  Systems  Analyst.  Com¬ 
ing  Incorporated  in  Coming,  NY, 
seeks  Senior  Systems  Analyst 
to  design  and  develop  applica¬ 
tions,  infrastructure  and  informa¬ 
tion  management  systems  that 
meet  business  requirements. 
Requires  Bachelor's  degree  in 
Information  Management.  Com¬ 
puter  Science,  Engineering  or 
related  field  and  relevant  experi¬ 
ence  including  work  with  rela¬ 
tional  databases  such  as  Oracle, 
SQL  Server  or  MS  Access,  pro¬ 
gramming  languages  such  as 
Java.  C,  C++,  Visual  Basic  or 
HTML,  and  experience  with 
object-oriented  design.  To  apply 
please  fonward  your  resume  to 
stoneer@coming.com  and  refer¬ 
ence  opening  9542. 

Corporate  Computer  Services 
(CCS)  has  multiple  openings 
for  System/Programmer  An¬ 
alysts,  S/W  Engineers,  both 
entry  &  experienced  levels 
(minimum  BS).  Skills  in  C/C++, 
VB,  Oracle  are  plus.  We  are 
small  but  we  do  not  lay  off. 
Attractive  wage  w/  benefits. 
AddIv  HR@ccsiusa.net.  EOE. 

ShellSoft  seeks  IT  profession¬ 
als  (programmer/system  ana¬ 
lysts,  software  engineers),  pro¬ 
ject  en-gineers.  Our  minimum 
requirement  is  BS.  Good  skills 
using  Oracle,  VB,  SAP,  SQL, 
Java,  C/C++  preferred.  Some 
position  requires  travel.  Please 
send  resume  to  iobs®shell 
.softinc.com.  EOE. 

Senior  Lead  Systems  Analyst. 
Corning  Incorporated  in  Corn¬ 
ing,  NY,  seeks  Senior  Lead 
Systems  Analyst  to  develop  IT 
solutions  by  creating  new  and 
modifying  existing  software  ap¬ 
plications  for  science  and  tech¬ 
nology  organization.  Requires 
Master’s  degree  in  Engineering 
or  Computer  Science  and  rele¬ 
vant  experience  in  the  stages  of 
innovation  in  an  R  &  D  environ¬ 
ment.  data  application  develop¬ 
ment  in  Oracle  using  SQL  and/or 
PL/SQL,  and  customizing  Manu¬ 
facturing  Execution  Systems.  To 
apply  please  forward  your 
resume  to  stoneer@corning.com 
and  reference  opening  9544. 

SAP  SYSTEMS  CONSULTANT 
MULTIPLE  POSITIONS 

Analyze  procedures  &  sftwr  req 
&  plan,  design  thru  ASAP  meth¬ 
odology,  using  MYSAP.COM 
Enterprise  Resource  Planning 
Sys  to  meet  GASB  34  &  35  & 
fiscal  req,  &  split  processor  for 
fund  accounting  primarily  for  US 
public  sector.  Integrate,  test,  id¬ 
entify  probiem,  consult  &  recom 
solutions.  M-F  8-5  Salary  comm 
w/  exp.  BSc.  Computer  Science 
or  Info  Sys  or  equiv  ed  &  exp  & 
2  yrs  exp  req.  Resume  to 
Labyrinth  Solutions,  Inc.,  8 
Oneida  Road,  Winchester,  MA 
01890. 

Cydent,  Inc.,  a  provider  of  soft¬ 
ware  services  based  in  Pleas¬ 
anton,  California,  is  looking  for  a 
Senior  Computer  Programmer. 
Job  duties:  Design,  develop,  test 
&  improve  DMS  for  Internet  and 
Intranet  Oracle-based  applica¬ 
tions  by  leading  team  of  pro¬ 
grammers  &  engineers.  Consult 
with  management  personnel  to 
clarify  program  intent,  identify 
problems,  and  suggest  program¬ 
ming  and  coding  required.  Sup¬ 
ervise  and  review  work  of  pro¬ 
gramming  personnel.  Test  run 
programs  and  train  program¬ 
mers.  U.S.  or  foreign  technical 
B.S.  &  5  yrs.  exp.  in  industry 
required.  Please  email  resumes 
to  resumes2004@cydent.com. 

WebMethods  -  EAI  &  B2B 
Certified  Programmer/Analysts: 
Analyze,  design,  develop,  test, 
implement  &  administer  special¬ 
ized  web  apps.  including  e-pro¬ 
curement  &  supply-chain  solu¬ 
tions  in  Web  Methods  4.6  and 
6.0.1.  &  Java  suites,  JDE  One 
Worid/SAP  Adapter,  Oracle,  MS- 
SQL,  Rational  tools,  EDIINT 
(AS2),  RNIF  1.1  Web/Apps.  on 
Servers  (WebLogic,  Net  dynam¬ 
ics,  Apache  -  Tomcat,  Jboss)  in 
various  OS.  Send  resume  to 
Attn:  Position  101/2004,  66 
Perimeter  Center  East,  Ste.  600, 
Atlanta,  GA  30346.  EOE. 

McData  Corp.  seeks  applicants 
for  the  position  of  Software 
Engineer  to  work  in  Sunnyvale, 
CA  and  other  unanticipated  job 
sites  in  the  U.S.  to  develop  Fibre 
Channel  switching  fabric  proto¬ 
col  and  services,  including  vari¬ 
ous  Fibre  Channel  switching 
services  software  components 
to  interface  with  proprietary  net¬ 
work  management  subsystems. 
Requires  master's  in  computer 
science  and  working  knowledge 
of  networking  protocol  and  stor¬ 
age  protocol,  SNMP,  zoning  pro¬ 
tocol  and  failover  algorithm. 
Respond  by  resume  to  Peter 
Whittle,  McData  Corp.,  380 
Interlocken  Crescent,  Broom¬ 
field,  CO  80021  and  refer  to 
JON  3. 

Principal  (IT  Professional)  need¬ 
ed  for  management  consulting 
and  information  technology  ser¬ 
vices  company  located  in  Lake 
Forest.  IL.  Job  duties  indude: 
Analyze,  design,  develop,  imple¬ 
ment.  and  provide  end  user  sup¬ 
port  for  computer  applications 
for  dients  located  throughout  the 
US.  Provide  sustaining  engi¬ 
neering  for  Legacy  systems  with 
client  server  and  web-based 
applications.  Develop  proprie¬ 
tary  and  custom  code  for  con¬ 
nectivity  to  databases  using 
Oracle  and  Sybase.  Use  C++. 
Visual  Basic,  GUI.  Java,  and 
CTI  products  such  as  Genesys 
and  Cisco  ICM  to  accomplish 
tasks.  Applicant  must  have  B.S. 
degree  in  computer  science, 
math,  engineering,  business  or 
physics.  Applicant  must  also 
have  2  yrs.  exp.  in  the  job  duties 
listed  above  or  in  any  computer 
related  occupation  which  in¬ 
cludes  skills  listed  above. 
$81,500/yr.  Send  resume  & 
cover  Itr.  to: 

loyalty_employment@eloyalty.com 
&  refer  to  job  #23464. 


IT  Manager  -  Circulation 


The  Seattle  Times  is  seeking  a  seasoned  IT  Manager  to  direct 
daily  operations  and  strategic  planning  in  our  Circulation  depart¬ 
ment.  This  position  is  responsible  tor  development  and  mainte¬ 
nance  efforts  related  to  all  of  our  Circ.  systems  and  developing 
technical  solutions  to  meet  our  business  needs.  The  successful 
candidate  will  have  the  ability  to  balance  priorities,  negotiate  with 
vendors,  collaborate  with  colleagues  across  the  company,  and 
implement  Improved  procedures  and  new  technology  for  the 
business.  You  will  have  bottom-line  budget  responsibility  and  will 
be  a  key  member  of  both  Circulation  and  IT  management. 
Qualified  candidates  should  have  5+  years  IT  exp.,  w/at  least  4 
years  in  mgmt  or  6  years  of  proj.  mgmt.  BS/BA  degree  with 
advanced  Business  or  Management  Information  Technology 
degree  preferred  or  equivalent  exp. 

We  are  a  family-owned  and  operated  company  and  support  a 
drug-free  workplace.  EOE.  Learn  more  about  our  company  at 
seattletimescompany.com.  Please  email  your  cover  letter  and 
resume  (single  Word  document)  with  job  title  and  job  #03-251  to: 

st.resumes@seattletimes.com  or  send  to:  The  Seattle  Times 
Employment  /  JOB#03-251  PO  Box  70  Seattle,  WA  98111 


Software  Engineer  wanted  by 
Nuventive,  LLC  to  develop  Java 
Code  (JSP,  Beans,  Classes), 
Write  SQL  (ANSI  SQL,  Transact 
SQL,  PL  /  SQL)  to  access  MS 
SQL  Server  7.0  &  Oracle  9i.  Min 
BS  with  3-yrexp.  using  Sun  One 
tech,  Apache  Tomcat,  iPlanet 
Application  server  Contact  hr@ 
nuventive.com.  No  calls. 

Hexium,  Inc.  is  a  new  IT  compa¬ 
ny.  It  has  openings  for  software 
engineers,  web  developers,  sys¬ 
tem  analysts.  Qualified  candi¬ 
dates  must  have  BS  with  sub¬ 
stantial  experience  in  ASP.Net, 
SQL.  Travel  may  required. 
Please  apply  at  humanre 
sources@hexiuminc.com.  EOE. 


SAP  Basis  Administrator  to  im¬ 
plement  and  administer  a  multi- 
domain  multi-user  SAP  system 
by  developing  related  security 
procedures,  configuration  of 
SAP  with  multiple  RDBMS,  de¬ 
veloping  landscape  client  proce¬ 
dures  and  implements  SAP 
change  controls  including  cor¬ 
rection  and  transportation  sys¬ 
tems  for  system  performance 
optimization  of  site  to  site  con¬ 
nectivity.  Requires  Bachelor's 
Degree  in  Computer  Science, 
Software  Engineering,  or  Electri¬ 
cal  Engineering  and  one  year 
direct  experience.  Send  resum¬ 
es  only,  no  calls,  to:  Carl 
Guenther,  Corio,  Inc.,  9525  W. 
Bryn  Mawr  Ave,  Ste  110, 
Rosemont,  IL  60018. 


Systems  Analysts:  Design/ 
develop  accntng. /financial 
apps.  conforming  with 
FASB  in  Oracle  Financials 
Suite,  Oracle  RDBMS  & 
related  tools.  Forms, 
Reports,  MS  SQL,  Deve¬ 
loper/Discoverer,  Lotus 
Notes  in  various  OS.  Travel 
to  client  sites.  Send 
Resume  to  3100  Breck¬ 
inridge  Blvd.,  Suite  100, 
Duluth,  GA  30096.  EOE. 


Systems  Analyst  required  by 
San  Jose,  CA  based  software 
services  co.  Requires  a 
Bachelor's  Degree  or  its  foreign 
equivalent  in  Technology  or 
Engineering  in  electronics  or 
computer  science.  Must  be 
skilled  in  TIBCO  Integration 
Platform.  Send  resume  to  HR 
Manager,  Varite,  Inc.,  12  South 
First  Street,  Suite  404,  San 
Jose,  CA  95113,  or  e-mail  at 
Careers@Varite.com 


SYSTEM  ANALYST  III  (Salem, 
NH):  Will  analyze  procedures 
and  problems  to  refine  data  and 
convert  to  programmable  form 
for  electronic  data  processing. 
Will  confer  with  customer  per¬ 
sonnel  to  ascertain  specific  out¬ 
put  requirements.  Will  support 
third  party  applications.  Will 
study  existing  data  handling  sys¬ 
tems  to  evaluate  effectiveness 
and  designs  technical  require¬ 
ments  for  new  and  existing  sys¬ 
tems  to  improve  production  or 
work  flow.  Will  prepare  charts 
and  diagrams  to  assist  in  prob¬ 
lem  analysis  and  submits  rec¬ 
ommendations  for  solution.  Will 
plan  and  prepare  technical 
reports,  memoranda  and 
instruction  manuals  relative  to 
the  establishment  and  function¬ 
ing  of  complete  operational  sys¬ 
tems.  Will  review  existing  opera¬ 
tional  systems  for  cost  effective¬ 
ness,  compliance  to  standards, 
and  flexibility.  Will  act  as  a  men¬ 
tor  to  lower  level  systems  ana¬ 
lysts  and  may  lead  some  pro¬ 
jects.  Requirements:  Bachelor’s 
degree  in  Computer  Science  or 
related  field  and  two  (2)  years  of 
experience  in  the  job  offered  or 
two  (2)  years  experience  in  the 
related  occupation  of  system  or 
software  engineering.  Also, 
demonstrated  expertise  using 
the  following:  (1)  BEA  Weblogic 
Application  Server,  (2)  Oracle 
Database  Server  and  UNIX 
administration;  and  (3)  Actuate 
or  Control  M.  Offered  salary  is 
$85, 000/year  for  full-time 
employment  (min.  40  hours  per 
week)  and  standard  company 
benefits.  EEO.  Submit  2 
resumes  and  respond  to  Job 
Order  #  2004-216,  PO  Box  989, 
Concord,  NH  03302-0989. 


Web  Developer/Programmer 

Multiple  positions  available  to 
primarily  develop  web-based 
computer  applications,  applying 
knowledge  of  computer  pro¬ 
gramming  techniques  &  sys¬ 
tems. 

Requirements:  Bachelor's 

degree  in  Computer  Science  or 
related  field.  Must  possess  3 
yrs.  post-baccalaureate  work 
exp.  in  position  offered  or  in 
computer  industry.  Must  be 
knowledgeable  &  proficient  in 
(1)  one  of  the  following  databas¬ 
es  (Oracle,  VSAM,  DB2,  SQL 
Server  or  Teradata);  (2)  JAVA; 
and  (3)  one  of  the  following  high- 
level  languages  (VB/ASP, 
PL/SQL  or  C/C++).  Must  be  will¬ 
ing  to  travel  &  relocate  to  client 
sites  nationwide  frequently. 
Replies  with  Ref.  Code  CW2004 
via  email  (steve.rydzak@sdi- 
worid.com).  fax  (412-221-2388) 
or  mail  (Steve  Rydzak,  SDI 
Technologies.  1373  Washington 
Pike,  Suite  103,  Bridgeville,  PA 
15017) 


Konboy  is  a  premier  global 
systems  integrator  that  provides 
high-quality,  high-value  solutions 
to  the  insurance,  banking,  credit 
cord,  consumer  lending  and 
securities  industries.  We  provide 
o  complete  life-cycle  of  services 
including  program  management, 
business  analysis,  technology 
planning,  architecture, 
application  development, 
maintenance  and  support.  Our 
specialized  services  include 
business  intelligence,  package 
selection,  customization, 
implementation  and  testing. 

The  following  opportunities  ore 
based  at  our  corporate 
headquarters  in  Chicago  and 
locations  nationwide. 

We  ore  seeking  candidates  with 
technical  skills  in  some  of  the 
following  areas:  JAVA,  J2EE, 
OOAD,WebSphere,  XML,  Net, 
Ingenium,  COBOL,  CICS,  DB2, 
JQ.,  and  VisionPlus  expertise  in 
an  MVS  environment. 

•  Project  Managers 

•  Technical  Architects 

•  Project  Leads 

•  Sr.  Programmer/ 
Analysts 

•  Associate  Consultant 

For  consideration,  forward 
response  to:  Kanboy,  Inc.,  6400 
Shafer  Ct.,  Suite  1 00,  Rosemont, 
IL60018.  Fox:  847-318-0784. 
Email:  rstewart@kanbaycom. 
Please  reference  code  CW0304 
in  all  correspondence.  Konboy  is 
an  Affirmative  Action 
Employer/EOE  organization. 


Kanbay 

www.kanbay.com 


MAXIL  Technology  Solutions  Inc 
is  seeking  a  Full  time  Program¬ 
mer  Analyst  who  has  Excellent 
knowledge  in  CMM.  lEE,  Soft¬ 
ware  Metrics,  Risk  Manage¬ 
ment.  Requirements  Review, 
Develop  test  Plans,  Change 
Control  and  Configuration  Man¬ 
agement.  Experience  in  white 
box  and  black  box  testing/ 
Manual  Testing.  Experience  with 
a  programming  language  (ASP, 
Cold  Fusion.  Visual  Basic)  is 
required.  Strong  Experience  in 
Database  connectivity  using 
DAO,  RDO.  ADO.  ADO.  .NET 
with  backend  as  SQL  Server 
and  Oracle. Experience  in  Ac¬ 
tiveX  component  and  COM. 
DCOM  objects  of  VB.  Education 
Experience;  Bachelors/Masters 
in  Science/Engineering  with 
minimum  of  two  Years  of  experi¬ 
ence  in  Automated  Tools  like 
WinRunner,  Load  Runner,  Test 
Director.  Oracle.  MS  SQL  Server 
and  VB.NET,  Informatica.  Re¬ 
spond  by  Email  to  resumes@ 
maxiltechnology.com/877-853- 
6009(F). _ 
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Business  Objects  has  an  open¬ 
ing  for  the  position  of  Sr. 
Consultant  to  be  based  out  of 
our  San  Jose,  CA  office. 

The  position  requires  a 
Bachelor's  or  foreign  degree 
equivalent  in  CS/IS/Business  or 
related  field  plus  five  years  of 
work  experience  as  IT,  software 
consulting  or  related.  The  job 
duties  include:  Implement,  ana¬ 
lyze,  design  and  delivery 
Business  Objects  Decision 
Support  Systems  for  FI  000  cus¬ 
tomers.  Complement  the  ser¬ 
vice  offerings  of  consulting  firms, 
systems  integrators,  and  large 
customer  personnel  in  architect¬ 
ing,  designing,  implementing, 
and  integrating  business  solu¬ 
tions  in  the  enterprise.  Identify 
all  technical  requirements  within 
assigned  account  for  delivering 
the  solutions  directly  and  for 
working  with  corporate  support 
personnel,  sales  management, 
and  the  Field  Sales  personnel  to 
resolve  any  technical  issues  or 
requirements.  Provide  techni¬ 
cal  solutions  to  customers  while 
identifying  new  opportunities. 
Travel  extensively  throughout 
the  U.S. 

To  apply  for  a  position,  visit  our 
website  at  www.businessob- 
jects.com/careers  or  fonward 
your  resume  (ref  CW0304)  to: 
Business  Objects  Americas, 
Attn:  Staffing,  3030  Orchard 
Pkwy,  San  Jose,  CA  95134. 
EOE 


Software  Developer.  Req. 
Master  of  Sci.  deg.  in  Comp. 
Sci.,  Info.  Tech.,  Eng.,  Sci., 
Math,  or  equiv  &  4  yrs.  of  exp.  in 
the  job  offered  or  4  yrs.  of  exp.  in 
software  development  for  serv¬ 
er-side  Java  internet  applies.  & 
relational  database  mgmt.  sys¬ 
tems.  All  of  exp.  must  include 
use  of  HTML.  DHTML,  Java¬ 
Script,  &  ASP  (exp.  may  be 
obtained  before  or  after  comple¬ 
tion  of  degree.)  Must  also  have 
at  least  2  yrs.  exp.  w/AWT, 
Applets,  Swing,  Servlets,  JSP, 
XML  &  UML,  and  must  have 
exp.  w/software  dev't  for  broad¬ 
cast/entertainment  industry. 
Must  have  Sun  Java  Prog¬ 
rammer  certification,  &  must  be 
an  Oracle  8i  DBA  certified  prof. 
Must  be  willing  to  travel  1-to-2 
times/yr  w/in  the  US.  Provide 
full  life-cycle  software  dev't  & 
Oracle  8i  database  admin, 
expertise  towards  the  design, 
dev't,  deployment  &  mainte¬ 
nance  of  new  &  existing 
Interactive  Digital  Entertainment 
projects.  Design,  dev.  &  main¬ 
tain  Java.  Servlets,  Applets, 
AWT,  Swing,  JSP,  XML,  HTML, 
DHTML,  JavaScript,  ASP,  & 
PL/SQL  code  &  administer  both 
dev't.  &  production  Oracle  8i 
databases.  40  hrs/wk.  Send 
resume  to  A.  Lloyd,  Turner 
Entertainment  Network,  1050 
Techwood  Dr.,  Atlanta,  GA 
30318. 


Sr.  Programmer/Analyst:  Ana¬ 
lyze,  design,  develop,  test,  im¬ 
plement  and  maintain  custom¬ 
ized  software  applications  In  a 
client/server  environment  and/or 
on  multi-tier  systems  related  to 
Intemet/Intranet/E  Commerce 
using  EJB  and  Oracle.  Must 
have  Bachelors  or  equivalent  in 
Computer  Science,  Math,  En¬ 
gineering  or  related.  Must  have 
2  yr  exp.  in  job  offered  or  in  soft¬ 
ware  development  using  EJB 
and  Oracle.  Will  accept  a  combi¬ 
nation  of  education  and  experi¬ 
ence  evaluated  by  a  recognized 
authority  as  equivalent  to  a 
bachelor's  degree.  Must  be  will¬ 
ing  to  be  assigned  to  unantici¬ 
pated  client  sites  throughout  the 
United  States.  Salary:  $72,000/ 
yr.  Hrs:  40hr/wk  8:00am-5:00 
pm.  Please  send  2  copies  of  res¬ 
ume  to:  Case  #200203721 .  Divi¬ 
sion  of  Career  Services,  Labor 
Certification  Unit.  19  Staniford 
St..  1st  FI.,  Boston,  MA  02114. 


Database  Administrator  (Indiana¬ 
polis,  IN  &  Waltham,  MA):  re¬ 
sponsible  for  database  manage¬ 
ment,  monitoring,  &  production 
support.  Apply  expertise  with 
InForm  electronic  data  collection 
software  to  trouble-shoot  func¬ 
tionality  problems  &  deliver  regu¬ 
lar  database  extracts  to  cus¬ 
tomers.  respond  to  database 
support  incidents,  perform  data¬ 
base  backup  &  recovery,  & 
ensure  database  integrity.  Ad¬ 
minister  system,  develop  soft¬ 
ware  script,  &  tune  performance. 
Optimize  query  &  system  perfor¬ 
mance  on  an  Oracle  database 
residing  on  NT  servers  for  trans¬ 
actional  &  reporting  applications. 
Install  system  upgrades,  manage 
physical  disk  resources,  perform 
automated  data  backups,  imple¬ 
ment  security  &  integrity  controls 
&  monitor  data  integrity.  Will  work 
extensively  with  ODBC,  SQL- 
•Plus,  Microsoft  Transaction  Ser¬ 
ver,  Microsoft  IIS,  SQL'Forms, 
HTML,  Peri,  Oracle  &  database 
development  &  reporting  sys¬ 
tems.  Min  req's:  Bachelor's  de¬ 
gree  in  Computer  Science,  En¬ 
gineering  or  a  related  field,  or 
equiv  in  work  exp.,  pius  4  yrs 
exp.  in  the  job  offered  or  in  posi¬ 
tion  administering  information 
management  systems,  including 
1  yr  with  InForm.  Must  have  un¬ 
restricted  authorization  to  work  in 
U.S.,  M-F,  8:30  a.m.  -  5:30  p.m., 
40  hrs/week.  Saiary:  $80K  - 
$95K/year.  Send  2  copies  of 
resume  to  Case#  200203599, 
Division  of  Career  Services,  Lab¬ 
or  Certification  Unit,  19  Staniford 
a.,  1st  Fioor,  Boston,  MA  02114. 


Infinite  Computing  Systems  a 
Cedar  Rapids,  Iowa  Company  is 
seeking  qualified  computer  pro¬ 
fessionals.  Current  positions 
available  must  meet  the  follow¬ 
ing  requirements.  All  positions 
require  at  least  a  Bachelors 
degree  (3  year  fgn  Bachelor 
degrees  are  acceptable).  We 
may  have  additional  positions 
available  in  addition  to  the  ones 
listed.  Multiple  positions  are  like¬ 
ly  available  in  some  positions. 
Candidate's  salary  offered  rela¬ 
tive  to  experience  and  skills. 
Candidates  must  be  willing  to 
relocate  and  travel  as  needed. 

A  variety  of  positions  are  avail¬ 
able,  which  require  between  1-5 
years  of  experience  in  the 
below-listed  skills.  Certain  posi¬ 
tions  may  require  a  Masters 
degree. 

*  Java,  HTML,  XML,  Weblogic  or 
Websphere 

*  Expeditor,  IDMS,  DB2 

*  ERP  (e  g.  SAP.  Peoplesoft  or 
Oracle  Apps) 

*  Visual  Basic,  SQL,  ASP.net, 
SQL  Server 

*  Easytreive,  QMF,  Cobol,  CICS, 
SAS,  TSO/ISPF 

*  C,  C++.  GUI,  Grade  or 
Informix  or  Sybase 

Please  send  resume  and  cover 
letter  to:  Raj  Inani,  President, 
Infinite  Computing  Systems, 
Inc.,  230  2nd  Street  -  Ste  214, 
Cedar  Rapids,  lA  52401. 


IT  Technical  Expert.  Req. 
Bachelor's  deg.  (or  equivalent 
educ.)  in  Comp.  Sci.,  Info.  Sys., 
or  MIS  &  5  years'  exp.  in  the  job 
offered  or  5  years'  exp.  in  the 
mgmt.  of  full  lifecyde  of  MS 
Exchange  or  Active  Directory 
deployment  from  initial  planning 
through  finai  impiemen.  Ail  stat¬ 
ed  exp.  must  include  MS 
Exchange  or  Active  Directory 
rollouts  to  20,000  or  more  seats 
with  at  least  15  sites;  and  the 
use  of  Visual  Basic  Scripting  for 
Active  Directory  or  LDAP 
(Lightweight  Directory  Access 
Protocol).  Manage  the  full  lifecy¬ 
de  of  MS  Exchange  and  Adive 
Directory  depioyment  projects 
from  initial  planning  through  final 
implementation.  Serve  as  tech¬ 
nical  advisor  and  chief  architect 
in  messaging  and  Active 
Directory  projects,  inciuding 
messaging  system  consoiida- 
tion,  implementation,  &  migra¬ 
tion.  Apply  with  resume  to:  Joe 
Borcover,  Weilpoint  Heaith 
Networks  Inc.,  21555  Oxnard 
Street,  Woodland  Hills,  CA 
91367. 


SENIOR  DATABASE  ADMINIS- 
TFtATOR  to  administer,  design 
and  support  MS  SQL  Server 
databases  and  database  objects 
using  Enterprise  Manager, 
Query  Analyzer  and  Osql; 
Analyze,  design  and  support 
Sybase  ASA  databases  and 
database  objects  using  Sybase 
Central  and  Dbisql;  Tune  data¬ 
bases  for  optimum  performance 
using  SQL  Profiler  and  relation¬ 
al  data  optimization  techniques, 
and  perform  troubieshooting; 
Design  and  deveiop  stored  pro¬ 
cedures,  triggers  and  functions 
using  T-SQL;  Perform  mass 
data  manipulation  on  MS  SQL 
Server  using  T-SQL;  Create  MS 
SQL  Server  backup  and  recov¬ 
ery  protocols;  Provide  technical 
support  and  training  to  various 
departments.  Require;  M.S. 
degree  (or  completion  of  all 
requirements)  in  Computer 
Science,  or  a  closely  related 
field  with  1  yr  of  exp  in  the  job 
offered  or  as  a  Database 
Anaiyst;  Experience  gained 
before  or  after  completing  the 
educational  requirement  will  be 
accepted.  Extensive  travel  on 
assignment  to  various  client 
sites  within  the  U.S.  is  required. 
Competitive  saiary  offered. 
Send  resume  to;  Lisa  Patz,  The 
CBORD  Group,  Inc.,  61  Brown 
Road,  Ithaca,  NY  14850.  Attn: 
Job  AK.  EEO. 


SENIOR  PROGRAMMER/ANA¬ 
LYST  to  analyze,  design,  devel¬ 
op.  test,  implement  and  support 
application  software  in  a  client/ 
server  environment  using  C, 
C++,  Java,  CORBA  and  Visual 
Basic  under  UNIX  and  Windows 
operating  systems.  Require: 
B.S.  degree  in  Computer  Sci¬ 
ence,  an  Engineering  discipline, 
or  a  cioseiy  reiated  field  with  2 
yrs  of  exp  in  the  job  offered  or  as 
a  Software  Engineer.  Extensive 
travel  on  assignment  to  various 
client  sites  within  the  U.S.  is 
required.  Competitive  salary 
offered.  Send  resume  to:  Roz  L. 
Alford,  ASAP  Staffing  LLC,  3885 
Holcomb  Bridge  Rd.,  Norcross, 
GA  30092;  Attn;  Job  AC. 


3  Systems  Analyst  positions  - 
Must  have  B.S.  or  Foreign 
equivalent  in  Computer  Science, 
Computer  Management  or  reiat¬ 
ed.  Must  have  4  yrs.  of  experi¬ 
ence  in  job  offered  or  4  yrs. 
experience  in  Software  Engin¬ 
eering  or  Software  Progra¬ 
mming.  Candidate  is  responsi- 
bie  for  converting  data  from  pro¬ 
ject  specifications  and  state¬ 
ments  of  probability  and  proce¬ 
dures;  preparing  work  flow¬ 
charts,  project  plans  and  design 
documents  using  business  and 
engineering  analysis,  math  mod- 
eis,  computer  ianguages,  and 
data  bases;  resoiving  questions 
of  programming,  data  input/out¬ 
put  requirements,  and  inciusion 
of  intemai  checks  and  controls; 
converting  detailed,  logical  flow¬ 
charts  to  software  code  and 
installing,  testing,  monitoring 
and  maintaining  the  same; 
preparing  reports,  user  & 
instructor  manuais  and  training 
users;  and  analyzing,  reviewing, 
and  rewriting  programs  to 
increase  operating  efficiency  or 
adapting  programming  to  new 
requirements.  Frequent  Travel 
Required.  Must  have  4  years  of 
experience  in  Oracle  8x/9x, 
C,C++,VC++,C#,  COM/DCOM, 
PL/SQL,  Pro*C,  ASP,  ASP.net 
and  TCP/IP  Sockets.  Qualified 
applicants  must  send  resume  to 
VSoft  Corporation,  S. 
Viswanathan,  6455  East  Johns 
Crossing,  Ste.  450,  Duluth,  GA 
30097. 


IT  Professionals 

Seeking  qualified  candi¬ 
dates  for  Sr.  &  mid-level  IT 
professional  positions  in¬ 
cluding:  Programmer  An¬ 
alysts,  Database  Admins, 
Software  Engineers,  IT/ 
Software  &  similar  type 
positions.  Candidates 

must  possess  MS/BS  or 
equivalent  &/or  related 
work  exp.  Mail  resume  & 
references  to: 

Patel  Consultants  Corp. 
Attn:  HR 

1 525  Morris  Ave 
Union,  NJ  07083  EOE 

We  seek  exp'd  Bioinformatics 
Software  Engineer  for  data 
anaiysis,  library  design,  virtual 
screening,  structure  based  drug 
design,  rationalization  and  pre¬ 
diction  of  structure-activity 
trends,  etc.  using  Rational  XDE, 
C,  SWT,  RequisitePro,  Java, 
RMI,  J2EE;  M  S.  or  B.S.  C/S, 
CIS  or  Bioinformatics  reqd. 
Send  resumes  only  to 
Paramount  Software  Solutions, 
inc.,  3350  Riverwood  Pkwy., 
Ste.1900,  Atlanta,  GA  30339 


Systems  Administrator  to  trou¬ 
bleshoot  software  issues,  data¬ 
base  administration,  for  Finan¬ 
cial  and  ERP  systems.  Provide 
impiementation  support  for  One 
World  HTML,  XPI  and  write 
JAVA  code  for  XPI  adapters. 
Perform  maintenance  tasks  for 
software  to  update  with  daily 
changes  in  the  system.  Maintain 
web  based  interface  of  ERP  sys¬ 
tems.  Bacheiors  degree  in 
Computer  Science,  Information 
Systems  or  Mathematics  and  2 
years  experience.  Send  resume 
to  Bellsoft,  Inc.  8770  W.  Bryn 
MawrAve.,  Suite  1300,  Chicago, 
iL,  60631. 


Software  engineer  to  design, 
develop  and  test  computer  pro¬ 
grams  for  business  applications; 
analyze  software  requirements 
to  determine  feasibiiity  of 
design;  direct  software  system 
testing  procedures  using  exper¬ 
tise  in  Fireworks,  MSMQ,  VB 
.NET  and  Visuai  Studio  .NET. 
Requirements;  Bachelor's  Deg¬ 
ree  or  equivalent  in  Computer 
Science  or  related  field  and  two 
years  experience  as  a  software 
engineer  or  computer  program¬ 
mer,  knowiedge  of  Fireworks. 
MSMQ.  VB  .NET  and  Visual 
Studio  .NET.  Saiary;  $70,242/ 
year.  Working  Conditions;  8:00 
A.M.  to  5:00  P.M.,  40  hours/ 
week,  invoives  extensive  travel 
and  frequent  relocation.  Apply: 
Site  Manager,  PA  CareerLink 
Westmoreiand  County,  300  East 
Hiiiis  Street,  Youngwood,  PA 
15697,  Job  No.  WEB400222. 


Network  and  Computer  Systems 
Administrator:  Instalis,  config¬ 
ures,  trouble  shoots,  supports 
and  maintains  LAN,  WAN,  MAIL, 
DHCP,  SQL  server  Database, 
DOMAIN,  Timberiine  system  of 
a  home  building  company,  with 
over  sixty  users  and  fifty+  sys¬ 
tems,  using  Noveii  and  Windows 
Network,  with  special  attention 
to  planning,  coordinating  and 
implementing  network  security 
measures.  Position  requires 
Bachelors  degree  in  computer 
science  or  equivaient  and  two 
years  experience  in  job  offered. 
Send  resume  to  5200  Vineland 
Road,  Suite  200,  Orlando, 
Florida  32811,  Attention;  Laurie 
Mooty. 
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Amtrak 

aren’t  screened  against  any 
DHS  terrorist  watch-list  data¬ 
base. 

Amtrak  declined  to  com¬ 
ment  on  what,  if  any,  security 
measures  beyond  bomb-sniff¬ 
ing  dogs  have  been  deployed 
to  protect  the  rail  system. 

But  technology  and  security 
analysts  said  there  are  IT- 
based  systems  available  today 
that  can  substantially  improve 
Amtrak’s  security  in  the  near 
term  without  having  a  nega¬ 
tive  impact  on  passenger 
movement  and  convenience. 

For  example,  a  $4,000-per- 
camera  license  from  Reston, 
Va.-based  ObjectVideo  can 
provide  security  managers 
with  software  that  lets  them 
set  rules  for  detecting  suspi¬ 
cious  behavior  using  existing 
security  cameras.  The  compa¬ 
ny  just  last  month  signed  a 
distributor  agreement  with 


Madrid-based  IT  Deusto,  and 
the  Madrid  metro  system  is 
now  planning  a  pilot  project 
using  the  software.  Since  the 
attacks  in  Spain,  a  demonstra¬ 
tion  of  the  technology  during 
a  U.S.  embassy-sponsored 
technology  expo  scheduled 
for  next  month  in  Madrid  has 
been  sold  out,  according  to 
ObjectVideo  CEO  Raul  Fer¬ 
nandez. 

“The  problem  with  large 
closed-circuit  television  infra¬ 
structures  is  there  are  a  lot  of 
cameras,  but  nobody’s  watch¬ 
ing  them,”  said  Fernandez. 
“That’s  where  technology 
comes  in.”  Had  ObjectVideo’s 
software  been  deployed  in 
Madrid,  it  would  likely  have 
been  able  to  detect  the  bomb¬ 
ers  leaving  backpacks  behind 
and  would  have  automatically 
dispatched  security  personnel 
to  investigate,  he  claimed. 

For  remote  areas  of  the  U.S. 
rail  system.  Axis  Communica¬ 
tions  Inc.,  a  Lund,  Sweden- 
based  surveillance  firm,  has 


developed  a  “network  camera” 
system  that  can  be  operated 
over  a  company’s  existing  IT 
infrastructure  or  the  excess 
fiber-optic  cable  that  typically 
runs  alongside  U.S.  railroad 
corridors. 

Fredrik  Nilsson,  CEO  of 
Axis,  agreed  that  most  securi¬ 
ty  cameras  aren’t  monitored. 
“You  need  to  have  enough 
intelligence  built  in  so  that 
the  cameras  that  are  being 
watched  are  the  ones  monitor¬ 
ing  areas  where  something  is 
happening,”  he  said. 

The  company  has  integrated 
video  motion-detection  tech¬ 
nology  into  each  network  cam¬ 
era  and  can  combine  time- 
stamped  recordings  with  phys¬ 
ical  security  events  to  give  se¬ 
curity  managers  “context,” 
said  Nilsson.  Alerts  can  then 
be  sent  in  the  form  of  text 
messages  to  cell  phones  or  e- 
mails  with  images  attached. 

“But  kids  spray-paint  and 
disable  security  cameras  all 
the  time,”  said  Ken  Barney,  a 


transportation  security  con¬ 
sultant  at  Plano,  Texas-based 
Electronic  Data  Systems  Corp. 
“So  the  other  way  to  do  it  is  to 
place  a  forward-looking  sen¬ 
sor  on  the  vehicle  to  look 
ahead.”  Barney  said  that 
adding  an  alert  mechanism 
similar  to  the  General  Motors 


Corp.  OnStar  system  used  in 
automobiles  would  be  easy  to 
do  immediately  and  would 
provide  a  critically  needed 
alert  mechanism  for  emergen¬ 
cies  in  remote  regions. 

Barry  Ptashkin,  a  railroad 
security  analyst  at  EDS,  said 
networked  forward-looking 
sensors  or  track  sensors  that 
include  GPS-  and  RFID-based 
tracking  systems  could  help 
improve  security  in  the  near 
term.  While  those  technol¬ 
ogies  are  widely  used  by 
freight  trains,  they’re  not  typi¬ 
cally  in  use  for  passenger 
trains,  Ptashkin  said. 

“Once  this  data  is  captured, 
it  can  be  integrated  into  a  uni¬ 
form  format  and  brought  into 
a  data  warehouse  that  would 
give  quick  indicators  of  high- 
risk  areas  or  key  performance 
indicators  and  patterns  that 
require  investigation,”  said 
Ptashkin.  “Even  if  it’s  limited, 
it’s  important  to  just  start  the 
concept  and  keep  it  moving.” 
O  45590 
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Risk  Index 

firmed  that  the  GSC  is  work¬ 
ing  on  delivering  the  frame¬ 
work  and  said  it  will  be  avail¬ 
able  by  this  summer. 

All  of  the  Big  Four  account¬ 
ing  firms  were  unable  to  pro¬ 
vide  comments  on  their  par¬ 
ticipation  by  press  time. 

“[The  RPI]  will  allow  third- 
party  auditors  to  come  in  and 
make  a  judgment  as  to  wheth¬ 
er  or  not  you  are  complying 
with  established  cybersecurity 
practices,”  explained  Larry 
Clinton,  chief  operating  offi¬ 
cer  at  the  Internet  Security  Al¬ 
liance.  ISA  members  that 
score  above  a  certain  level  on 
the  RPI  could  qualify  for  low¬ 
er  insurance  rates. 

The  Arlington,  Va.-based 
ISA  is  a  collaborative  effort 
between  the  CERT  Coordina¬ 
tion  Center  at  Carnegie  Mel¬ 
lon  University  in  Pittsburgh 
and  the  Electronic  Industries 


Alliance,  a  federation  of  trade 
associations. 

Robert  A.  Parisi  Jr.,  senior 
vice  president  and  chief  un¬ 
derwriting  officer  for  AIG’s 
eBusiness  Risk  Solutions 
group,  said  he  wasn’t  aware 
of  the  specifics  of  the  arrange¬ 
ment  with  the  ISA.  But  ISA 
members  assessed  by  means 
of  tools  such  as  the  RPI  will  be 
viewed  as  “highly  desirable 
risks  and  ones  that  we  want 
to  price  in  a  highly  competi¬ 
tive  fashion  because  we  view 

HWhen  you 
have  all  of  the 
big  accounting  firms 
applying  a  certain 
standard,  it  carries 
a  certain  amount  of 
weight. 

ROBERT  A.  PARISI  JR.. 

AI6  INTERNATIONAL  INC.'S 
EBUSINESS  RISK  SOLUTIONS  GROUP 


them  as  doing  the  right  thing,” 
Parisi  said. 

“This  is  an  attempt  to  come 
up  with  a  kind  of  universally 
agreed  upon  set  of  values  and 
benchmarks  that  can  be  ap¬ 
plied  across  industries”  for 
measuring  a  company’s  ex¬ 
posure  to  cyber  risk,  Parisi 
said.  “When  you  have  all  of 
the  big  accounting  firms  ap¬ 
plying  a  certain  standard,  it 
carries  a  certain  amount  of 
weight,”  he  added. 

The  relative  lack  of  broadly 
applicable  quantitative  risk- 
measurement  tools  for  the 
critical  infrastructure  and  for 
enterprise  IT  has  been  a  long- 
lamented  issue  among  securi¬ 
ty  professionals. 

There  are  standards  such  as 
the  ISO  7799,  ISO  1799  and 
those  from  the  National  Insti¬ 
tute  of  Standards  and  Technol¬ 
ogy  that  are  currently  used  by 
organizations  as  benchmarks 
and  assessment  frameworks. 
But  there  are  few  widely 
accepted  standards  that  are 


comparable  to  the  generally 
accepted  accounting  princi¬ 
ples  and  generally  accepted 
auditing  standards  that  audi¬ 
tors  in  the  financial  services 
industry  are  able  to  use,  Parisi 
said.  “At  the  moment,  there  re¬ 
ally  isn’t  an  equivalent  to  that 
when  it  comes  to  information 
security.” 

Formidable  Challenges 

Developing  a  framework  such 
as  the  RPI  is  highly  desirable 
but  could  be  a  huge  challenge, 
users  said.  For  one  thing,  it’s 
extremely  hard  to  model  risk 
when  it  comes  to  cybersecuri¬ 
ty,  said  Robert  Garigue,  chief 
information  security  officer  at 
Bank  of  Montreal. 

“When  we  are  looking  at 
events  and  the  predictability 
of  good  or  bad  outcomes  in 
cyberspace,  we  don’t  have 
much  historical  data  to  look 
at,”  Garigue  said.  It  becomes 
extremely  hard,  for  instance, 
to  predict  with  any  kind  of  va¬ 
lidity  the  number  of  virus  at¬ 


tacks  that  might  take  place 
over  the  next  year,  especially 
in  an  environment  where  the 
technology  and  application  in¬ 
frastructure  are  changing  so 
rapidly,  he  said. 

“It  is  very  difficult  to  do  be¬ 
cause  every  network  is  differ¬ 
ent,”  said  Dennis  Treece,  di¬ 
rector  of  corporate  security  at 
the  Massachusetts  Port  Au¬ 
thority  in  Boston. 

Mergers,  acquisitions,  up¬ 
grades  and  a  lack  of  standards 
in  purchasing  over  the  years 
have  contributed  to  a  situa¬ 
tion  that  makes  quantifiable 
risk  assessment  difficult, 
Treece  said.  “It  is  nearly  im¬ 
possible  to  make  any  valid  as¬ 
sumptions  beyond  ‘We’re  a 
Microsoft  shop’  or  ‘We’re 
mostly  switched’  or  the  like,” 
he  said.  O  45597 
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FRANK  HAYES  ■  FRANKLY  SPEAKING 

RFID  Kick-start 


WORRYING  ABOUT  RFID?  Now’s  a  good  time  for  it. 

Really.  And  not  just  because  the  topic  of  radio  fre¬ 
quency  identification  tags  is  hovering  like  a  dark 
cloud  over  your  IT  shop.  Last  week  at  the  big 
CeBIT  trade  show  in  Hanover,  Germany,  dozens 
of  vendors  were  showing  RFID-related  products  —  including  cell 
phone  maker  Nokia,  which  announced  an  add-on  kit  for  people  who 
want  to  use  their  Nokia  phones  to  read  RFID  tags. 

Which  means  RFID  is  now  officially  mainstream.  And  learning 
RFID  on  the  cheap  is  now  officially  practical. 


And  considering  how  much  some  companies 
are  likely  to  spend  on  RFID  over  the  next  few 
years,  cheap  is  a  very  attractive  price. 

Face  it:  Right  now  RFID  is  probably  a  mystery 
to  you  and  your  IT  staff.  Oh,  you  may  have  read 
a  few  articles  on  RFID.  You  may  even  have  seen 
demonstrations.  But  for  all  you  know,  the  arti¬ 
cles  are  wrong  and  the  demos  are  rigged. 

Unless  you’re  already  hip-deep  in  an  RFID 
implementation  —  because  Wal-Mart  or  Target 
or  Albertsons  or  the  Defense  Department  has 
set  a  2005  deadline  for  you  to  put  RFID  tags  on 
every  pallet  and  carton  you  ship  their  way  — 
you  and  your  people  don’t  know  RFID. 

And  you  should.  You  know  that.  If  you  make 
or  move  any  kind  of  product,  eventually  you’ll 
need  to  start  building  some  RFID  expertise.  But 
there’s  only  one  way  to  do  that:  Put  RFID  tech¬ 
nology  in  the  hands  of  your  IT  staff  and  let 
them  kick  it  around. 

But  usually  there’s  a  nasty  trade-off.  If  you 
bring  in  a  technology  early  in  its  life  cycle,  your 
staff  gets  the  maximum  exposure  and  the  most 
time  to  figure  it  out.  Unfortunately,  early  on  is 
when  any  new  technology  is  likely  to  be  most 
expensive. 

You  can  wait  until  the  price 
comes  down.  But  then  you  could 
find  yourself  racing  to  meet  a  man¬ 
date  that  customers  or  your  CEO 
has  set  for  getting  that  technology 
up  and  running  —  and  making  all 
your  early  mistakes  against  a  hard 
deadline.  That  gets  expensive,  too. 

But  right  now,  there’s  a  sweet  spot 
for  RFID.  You’ve  still  got  time  — 
and  RFID  starter  technology  has 
gotten  cheap. 

Right  now  you  can  buy  RFID 
evaluation  kits  from  companies  like 
SkyeTek  Inc.  in  Boulder,  Colo.,  and 


RFID  Inc.  in  Aurora,  Colo.  For  $750  or  less,  you 
get  an  RFID  reader,  sample  RFID  tags,  software 
—  pretty  much  everything  your  techies  need  to 
start  getting  comfortable  with  this  stuff. 

No,  it’s  not  enough  to  do  a  pilot  project. 

Think  of  this  as  the  prepilot  stage,  when  your 
staff  can  try  out  RFID,  experiment  with  it,  kick 
the  tires  and  get  a  real  gut-level  sense  of  how  it 
works  and  what  it  can  do. 

And  you  can  most  likely  pay  for  it  all  out  of 
petty  cash. 

Of  course,  those  RFID  products  at  CeBIT  are 
a  sign  of  what’s  to  come.  By  the  end  of  the  year, 
we’ll  be  awash  in  RFID-enabled  devices.  Wait 
another  six  months  and  you’ll  see  RFID  reach¬ 
ing  all  the  way  down  into  consumer  products  — 
cell  phones,  handhelds  computers,  plug-and- 
play  PC  peripherals.  Ordinary  people,  or  at 
least  tech-sawy  hobbyists,  will  be  making  and 
scanning  their  own  RFID  tags.  The  sweet  spot 
will  have  gotten  sweeter. 

But  if  you  wait,  you’ve  lost  that  head  start. 

You’ve  lost  something  else,  too.  For  the  past 
few  years,  the  people  in  your  IT  department 
have  been  grinding  away.  The  hours  have  been 
long,  the  layoffs  have  been  depressing,  and, 

with  no  money  for  new  projects  in 
the  budget,  the  technology  hasn’t 
exactly  been  exciting. 

Now  you’ve  got  an  opportunity 
to  remind  them  that  there’s  a  fu¬ 
ture  for  them  in  your  IT  shop.  A 
future  with  challenging  technology. 
A  future  that  will  require  honing 
old  skills  and  developing  new  ones. 
A  future  you  want  them  to  get 
ready  for. 

Don’t  waste  that  opportunity. 
Quit  worrying  about  RFID  and 
start  doing  something  about  it  now 
—  on  the  cheap.  O  45552 


FRANK  HAYES,  Computef- 
world's  senior  news  colum¬ 
nist,  has  covered  IT  for  more 
than  20  years.  Contact  him  at 
frank.hayes@computerwortd.com. 


Better  Safe  Than  Sorry,  Right? 

Virus  invades  the  network  at  this  real  estate  agency’s 
main  site,  so  IT  consultant  pilot  fish  advises  discon¬ 
necting  the  agency’s  remote  office.  Fish  cleans  up 
main  office,  then  heads  for  the  other  site  -  and  finds  a 
baffled  staff.  “We  got  the  message  to  disconnect,  but 
we  didn’t  know  exactly  what  to  disconnect,  so  we  dis¬ 
connected  everything,"  office  manager  says.  And  it 
takes  fish  all  night  to  reconnect  every  network  cable, 
mouse,  keyboard,  monitor  and  power  cord. 
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Aha! 

Nurse  at  this 
state  hospital 
tells  support 
pilot  fish  that 
she’s  getting  a  strange 
error  message  on  her 
PC.  Fish  immediately  di¬ 
agnoses  the  problem: 
“It’s  the  monitor’s  ‘no 
signal’  message,”  he 
tells  the  nurse.  “All  you 
have  to  do  is  turn  the 
computer  on.”  “You 
mean  the  box  thingy  that 
sits  on  the  floor?”  she 
replies.  “You  guys  took 
that  away  yesterday  to 
fix  some  other  problem.” 

Just  Trying  to 
Cooperate 

User  says  his  PC  is  act¬ 
ing  strangely,  closing 
some  applications  and 
opening  others  on  its 
own.  Support  pilot  fish 
can’t  detect  a  virus  or 
any  other  problem  with 
the  PC,  despite  returning 
to  the  user’s  desk  sever¬ 
al  times.  But  user  keeps 
complaining  about  it.  “I 
was  in  early  one  morn¬ 
ing,  so  I  went  to  check 
that  PC  before  anyone 
arrived,”  says  fish.  “To 
my  surprise,  I  found  re¬ 
frigerator  magnets  stuck 
all  over  the  machine. 
When  confronted,  the 
user  said  he  took  them 
off  when  I  came  down 
because  I  had  told  oth¬ 
ers  not  to  put  magnets 
on  their  PCs.” 


Hey,  Help 
Is  Help 

Temp  claims 
she’s  well 
versed  in  PC 
use,  but  she  calls  this  IT 
help  desk  pilot  fish  every 
half  hour  for  three 
weeks.  Turns  out  she’s 
not  good  at  doing  any¬ 
thing  else  either,  and 
soon  she’s  gone.  Four 
months  later,  fish’s 
phone  rings  with  a  caller 
asking  questions  about 
software  that  fish’s 
company  doesn’t  even 
use.  “It  was  the  temp," 
groans  fish.  “She  was 
now  temping  at  a  local 
university,  but  she  called 
the  one  number  she 
knew  could  help  her.” 

And  Thanks  for 
Your  Support 

CIO  tasks  pilot  fish  with 
doing  risk  assessment 
on  a  major  project,  and 
fish  determines  the 
biggest  risks:  The  proj¬ 
ect  sponsor  is  ineffec¬ 
tive,  and  the  project 
manager  is  worse.  “Big 
problem:  The  sponsor  is 
the  CIO,  and  the  PM  is 
his  contractually  em¬ 
ployed  buddy,”  fish  says. 
Rsh’s  report  gets  buried. 
Project  runs  late  and 
$1.5  million  over  budget. 
And  in  fish’s  next  evalu¬ 
ation,  CIO  writes,  “I 
wonder  sometimes  if  you 
have  the  backbone  re¬ 
quired  for  your  job.” 


OFEED  THE  SHARK!  Send  your  true  tales  of  IT  life  to 
sharky@computerworid.com.  You  snag  a  snazzy 
Shark  shirt  if  we  use  it.  And  check  out  the  daily  feed,  browse 
the  Sharkives  and  sign  up  for  Shark  Tank  home  delivery  at 

computerworld.com/sharky. 


#The  best  way  to  stay  ahead  is  to  double 
your  productivity.  Introducing  Scan^ 
S  C  3  n  ^  technology  from  Sharp.  Sharp’s  Digital 
Imagers  with  Scan^  technology  are  designed  to  scan  two- 
sided  documents  in  a  single  pass. 

Now  your  training  manuals  and  white  papers  can  be 
scanned,  copied,  emailed  and  digitally  distributed  quicker 
than  ever  before. 


In  fact,  it's  115%  faster  than  any  other  product  in  its  class. 
Not  only  is  it  like  having  double  the  help,  it  will  also  allow 
you  to  accomplish  more  tasks,  in  dramatically  less  time. 
Together  with  Sharp's  integrated  network  management 
software  and  security  features,  your  digital  information  is 
safe  and  workflow  is  fully  optimized. 

Visit  sharpusa.com/scan2  or  call  1-800-BE-SHARP  for 
more  information. 


The  AR-M550.  AR-M620  and  AR-M700: 

.  Operate  at  55,  62  and  70  pages-per-minute 

.  Fully  integrated  network  ready  digital  copier/printers 

.  Include  network  management  software  and  document  filing  capability 

.  be  sharp 


Double  your  productivity  with  Scan^  technology. 
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•  Results  of  Buyers  Laboratory  Inc.  Document  Feeding  Speed  tests  (originals  per  minute)  in  2:2  mode  for  Sharp  AR-M550  vs.  the  following  manufacturers'  competitive  models:  Canon  iR  5000  and  5020,  HP  9055  MFP.  Konica  7155.  Kyocera  Mita  KM-5530,  Ricoh  Aficio  1055  and  551.  and 
Toshiba  e-STUDIO  550.  C2003  Sharp  Corporation 


IBM  Express  Middleware:  Designed 
and  developed  for  midsize  companies. 

(IBM  muscle  for  less  moolah.) 
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MIDDLEWARE  IS  POWERFUL  IBM  SOFTWARE.  The  kind  of  software  that  makes  your  applications  work  better  to  solve 
your  business  problems.  It’s  an  answer.  It’s  IBM  DB2r  Lotus^  Tivoli®  and  WebSphere®  And  in  the  form  of  IBM  Express  Middleware, 
it’s  now  more  accessible  than  ever  for  midsize  businesses. 

IBM  Express  Middleware  is  engineered  to  work  with  your  existing  business  applications  whether  they  run  on  Windows^  Linux® 
or  UNIX®  It’s  engineered  to  be  deployed  by  those  without  computer  science  degrees.  It’s  priced  to  put  a  smile  on  Accounting’s 
face.  It’s  nimble.  Quick.  Flexible. 


Your  technology  will  work  harder  to  meet  the  demands  of  your  customers,  your  business  goals  and  your  industry’s  needs.  It  makes 
your  business  more  responsive  to  the  unforeseen.  Of  course,  all  of  this  is  easy  to  implement,  easy  to  install,  simple  to  maintain.  You 
need  to  learn  more.  To  find  an  IBM  Business  Partner  in  your  area,  visit  ibm.com/software/express 


a''  ii.ki.  trademarks  y  aterrialional  Business  Machines  Ccrporatiori  in  the  United  States  and/or  other  countries  Linux  is  a  registered  trademark  o(  L/ Torvalds  Windov.r- 

nor  ..l  ull  III '  le  i  ited  States  and/or  othei  countries  UNIX  is  a  registered  trademark  of  The  Open  Group  in  the  United  States  and/or  other  countries  2004  IBM  Corporation.  All  rights  reserved. 


